CVE-2016-0345 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rend...
MediumCVSS 4.3
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tririga application platform | >= 3.3.0.0, < 3.3.2.6 | 3.3.2.6 |
| ibm tririga application platform | >= 3.4.0.0, < 3.4.2.3 | 3.4.2.3 |
| ibm tririga application platform | = 3.5.0.0 | No fix listed |
References
- ibm-tririga-cve20160345-info-disc(111786) vdb-entry vendor-advisory
- www-01.ibm.com vendor-advisory