CVE-2016-2953

—

CVSS 3.0

3.7 low

EPSS

1%p68

Published

Nov 30, 2016 (Nov 30, 2016)

Modified

Jun 17, 2026

Description

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

Vendors: ibm
Products: connections
Weakness: CWE-310
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.