{"api_version":"1","generated_at":"2026-07-23T20:57:03+00:00","cve":"CVE-2016-0238","urls":{"html":"https://cve.report/CVE-2016-0238","api":"https://cve.report/api/cve/CVE-2016-0238.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-0238","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-0238"},"summary":{"title":"CVE-2016-0238","description":"IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409","state":"PUBLISHED","assigner":"ibm","published_at":"2017-07-05 13:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-200","Obtain Information"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"3.7","severity":"LOW","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/99379","name":"http://www.securityfocus.com/bid/99379","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM Security Guardium CVE-2016-0238 Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21989124","name":"http://www.ibm.com/support/docview.wss?uid=swg21989124","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Bulletin: IBM InfoSphere Guardium is affected by \nCleartext Transmission of Sensitive Information vulnerability (CVE-2016-0238 )","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0238","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0238","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 9.0","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 9.1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 10.0","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 9.5","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 10.1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Security Guardium","version":"affected 10.1.2","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"10.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"238","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_guardium","cpe6":"9.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T22:15:23.138Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409"},{"name":"99379","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/99379"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=swg21989124"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Security Guardium","vendor":"IBM","versions":[{"status":"affected","version":"9.0"},{"status":"affected","version":"9.1"},{"status":"affected","version":"10.0"},{"status":"affected","version":"9.5"},{"status":"affected","version":"10.1"},{"status":"affected","version":"10.1.2"}]}],"datePublic":"2017-06-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409"}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-06T09:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["x_refsource_MISC"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409"},{"name":"99379","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/99379"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ibm.com/support/docview.wss?uid=swg21989124"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2017-06-30T00:00:00","ID":"CVE-2016-0238","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Guardium","version":{"version_data":[{"version_value":"9.0"},{"version_value":"9.1"},{"version_value":"10.0"},{"version_value":"9.5"},{"version_value":"10.1"},{"version_value":"10.1.2"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409","refsource":"MISC","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/110409"},{"name":"99379","refsource":"BID","url":"http://www.securityfocus.com/bid/99379"},{"name":"http://www.ibm.com/support/docview.wss?uid=swg21989124","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg21989124"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2016-0238","datePublished":"2017-07-05T13:00:00.000Z","dateReserved":"2015-12-08T00:00:00.000Z","dateUpdated":"2024-09-17T02:16:37.740Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-07-05 13:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-200","Obtain Information"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*","matchCriteriaId":"64C62744-22BD-4038-8257-822ADDAC370D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*","matchCriteriaId":"26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*","matchCriteriaId":"37342DD2-055B-429C-9231-2D9FE70B5AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*","matchCriteriaId":"552A0A69-388F-4842-A882-78F267D4BF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*","matchCriteriaId":"148A8443-DF7A-42AA-8D86-128CCC1D871E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"45E6B962-F8F8-4979-BC76-AE0B16EEB082"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"238","Ordinal":"1","Title":"CVE-2016-0238","CVE":"CVE-2016-0238","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"238","Ordinal":"1","NoteData":"IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409","Type":"Description","Title":"CVE-2016-0238"},{"CveYear":"2016","CveId":"238","Ordinal":"2","NoteData":"2017-07-05","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"238","Ordinal":"3","NoteData":"2017-07-06","Type":"Other","Title":"Modified"}]}}}