IBM Tivoli Monitoring SOAP Server CVE-2016-6083 Information Disclosure Vulnerability

Bugtraq ID:	99259
Class:	Design Error
CVE:	CVE-2016-6083
Remote:	Yes
Local:	No
Published:	Jun 22 2017 12:00AM
Updated:	Jun 22 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM Tivoli Monitoring 6.3 Fix Pack 7 IBM Tivoli Monitoring 6.3 IBM Tivoli Monitoring 6.2.3 Fix Pack 5 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 Fix Pack 9 IBM Tivoli Monitoring 6.2.2
Not Vulnerable:

IBM Tivoli Monitoring SOAP Server CVE-2016-6083 Information Disclosure Vulnerability

IBM Tivoli Monitoring SOAP Server is prone to a remote information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information. This may aid in further attacks.

IBM Tivoli Monitoring SOAP (KSH component) versions 6.2.2 through 6.2.2 Fix Pack 9, 6.2.3 through 6.2.3 Fix Pack 5 and 6.3.0 through 6.3.0 Fix Pack 7 are vulnerable.

IBM Tivoli Monitoring SOAP Server CVE-2016-6083 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Tivoli Monitoring SOAP Server CVE-2016-6083 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22000909: IBM Tivoli Monitoring Soap Server (CVE-2016-6083) (IBM)