CVE-2016-6087 IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918.
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm domino | = 8.5.1.0 | No fix listed |
| ibm domino | = 8.5.1.1 | No fix listed |
| ibm domino | = 8.5.1.2 | No fix listed |
| ibm domino | = 8.5.1.3 | No fix listed |
| ibm domino | = 8.5.1.4 | No fix listed |
| ibm domino | = 8.5.1.5 | No fix listed |
| ibm domino | = 8.5.2.0 | No fix listed |
| ibm domino | = 8.5.2.1 | No fix listed |
| ibm domino | = 8.5.2.2 | No fix listed |
| ibm domino | = 8.5.2.3 | No fix listed |
| ibm domino | = 8.5.2.4 | No fix listed |
| ibm domino | = 8.5.3.0 | No fix listed |
| ibm domino | = 8.5.3.1 | No fix listed |
| ibm domino | = 8.5.3.2 | No fix listed |
| ibm domino | = 8.5.3.3 | No fix listed |
| ibm domino | = 8.5.3.4 | No fix listed |
| ibm domino | = 8.5.3.5 | No fix listed |
| ibm domino | = 8.5.3.6 | No fix listed |
| ibm domino | = 9.0.0.0 | No fix listed |
| ibm domino | = 9.0.1.0 | No fix listed |
| ibm domino | = 9.0.1.1 | No fix listed |
| ibm domino | = 9.0.1.2 | No fix listed |
| ibm domino | = 9.0.1.3 | No fix listed |
| ibm domino | = 9.0.1.4 | No fix listed |
| ibm domino | = 9.0.1.5 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm domino | = 9.0.1.6 | No fix listed |
| ibm domino | = 9.0.1.7 | No fix listed |
| ibm domino | = 9.0.1 | No fix listed |
| ibm domino | = 9.0 | No fix listed |
| ibm domino | = 8.5.1 | No fix listed |
| ibm domino | = 8.5.2 | No fix listed |
| ibm domino | = 8.5.3 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 98794 third-party-advisory vdb-entry
- 1038606 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory