What is CVE-2016-2953?

CVE-2016-2953 is a low-severity vulnerability in Ibm Connections, classified under Cryptographic Issues. CVSS score: 3.7/10. Published 2016-11-30.

How severe is CVE-2016-2953?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Ibm Connections

CVE-2016-2953

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Ibm Connections — versions 4.0.0.0, 4.5.0.0, 5.0.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

psirt@us.ibm.com (vendor-advisory, Broken Link, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@us.ibm.com (vendor-advisory, Broken Link, x_refsource_AIXAPAR)

Frequently asked questions

What is CVE-2016-2953?: CVE-2016-2953 is a low-severity vulnerability in Ibm Connections, classified under Cryptographic Issues. CVSS score: 3.7/10. Published 2016-11-30.
How severe is CVE-2016-2953?: Low severity. CVSS v3 base score is 3.7 out of 10.