CVE-2016-2958

—

CVSS 3.0

4.3 medium

EPSS

2%p75

Published

Nov 30, 2016 (Nov 30, 2016)

Modified

Jun 17, 2026

Description

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response.

Vendors: ibm
Products: connections
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.