IBM Domino CVE-2016-6087 Information Disclosure Vulnerability

Bugtraq ID:	98794
Class:	Design Error
CVE:	CVE-2016-6087
Remote:	Yes
Local:	No
Published:	May 31 2017 12:00AM
Updated:	May 31 2017 12:00AM
Credit:	Luke Valenta at the University of Pennsylvania.
Vulnerable:	IBM Domino 9.0.1 IF 4 IF 3 IBM Domino 9.0.1 IF 4 IF 2 IBM Domino 9.0.1 FP8 IF2 IBM Domino 9.0.1 FP6 IBM Domino 9.0.1 FP 6 IBM Domino 9.0.1 FP 5 IBM Domino 9.0.1 FP 4 IF 3 IBM Domino 9.0.1 FP 4 IF 2 IBM Domino 9.0.1 FP 4 IBM Domino 9.0.1 FP 3 IF 2 IBM Domino 9.0.1 FP 3 IBM Domino 9.0.1 FP 2 IF 3 IBM Domino 9.0.1 FP 2 IF 2 IBM Domino 9.0.1 FP 2 IF 1 IBM Domino 9.0.1 Fix Pack 3 IF 3 IBM Domino 8.5.3 FP6 IF17 IBM Domino 8.5.3 FP6 IF13 IBM Domino 8.5.3 FP 6 IF4 IBM Domino 8.5.3 FP 6 IF 9 IBM Domino 8.5.3 FP 6 IF 6 IBM Domino 8.5.3 FP 6 IF 5 IBM Domino 8.5.3 FP 6 IF 16 IBM Domino 8.5.3 FP 6 IF 13 IBM Domino 8.5.3 FP 6 IF 12 IBM Domino 8.5.3 FP 6 IF 11 IBM Domino 8.5.3 FP 6 IF 10 IBM Domino 8.5.3 Fix Pack 6 IF 7 IBM Domino 8.5.3 Fix Pack 6 IBM Domino 8.5.3 Fix Pack 5 IBM Domino 8.5.3 IBM Domino 8.5.2 FP 4 IBM Domino 8.5.2 IBM Domino 8.5.1 FP 5 IBM Domino 8.5.1 IBM Domino 9.0.1.5 IBM Domino 9.0.1.4 IBM Domino 9.0.1.3 IBM Domino 9.0.1.2 IBM Domino 9.0.1 FP 7 IBM Domino 9.0.1 FP 6 IF 3 IBM Domino 9.0.1 FP 6 IF 1 IBM Domino 9.0.1 IBM Domino 9.0 IF 7 IBM Domino 9.0 IF 6 IBM Domino 9.0 IF 4 IBM Domino 9.0
Not Vulnerable:	IBM Domino 9.0.1 FP8

IBM Domino CVE-2016-6087 Information Disclosure Vulnerability

IBM Domino is prone to an information disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information. Successful exploits will lead to other attacks.

IBM Domino CVE-2016-6087 Information Disclosure Vulnerability

References:

• IBM Domino Home Page (IBM)
  
• IBM Homepage (IBM)
  
• swg22002808:IBM Domino TLS server Diffie-Hellman key validation vulnerability (C (IBM)