Lucene search

IBMEB2D86A7BBA252757A65C0A0A0329A0AD6B47B01B8C03C060D72D11BD2074A52

HistoryAug 30, 2022 - 4:40 p.m.

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2016-3093

2022-08-3016:40:55

www.ibm.com

ibm

tririga

application platform

cve-2016-3093

denial of service

apache struts

vulnerability

denial of service fix

download

remediation

fixcentral

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.027

Percentile

90.6%

JSON

Summary

IBM TRIRIGA Application Platform discloses CVE-2016-3093

Vulnerability Details

CVEID:CVE-2016-3093
**DESCRIPTION:**Apache Struts is vulnerable to a denial of service, caused by the improper implementation of cache used to store method references by the OGNL expression language. An attacker could exploit this vulnerability to block access to a Web site.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/113686 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM TRIRIGA Application Platform	All
IBM TRIRIGA Application Suite	All

Remediation/Fixes

Product|VRMF|

Remediation/First Fix

—|—|—
IBM TRIRIGA Application Platform| 3.6.1.3| The fix is available for download on FixCentral.
IBM TRIRIGA Application Platform| 3.7.0.1| The fix is available for download on FixCentral
IBM TRIRIGA Application Platform| 3.8.0.1| The fix is available for download on FixCentral
IBM TRIRIGA Application Platform| 4.0.2| The fix is available for download on FixCentral
IBM TRIRIGA Application Platform| 4.1.1| The fix is available for download on FixCentral

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtririga_application_platformMatch3.6

ibmtririga_application_platformMatch2.7

ibmtririga_application_platformMatch3.8

ibmtririga_application_platformMatch4.0

ibmtririga_application_platformMatch4.1

VendorProductVersionCPE
ibmtririga_application_platform3.6cpe:2.3:a:ibm:tririga_application_platform:3.6:*:*:*:*:*:*:*
ibmtririga_application_platform2.7cpe:2.3:a:ibm:tririga_application_platform:2.7:*:*:*:*:*:*:*
ibmtririga_application_platform3.8cpe:2.3:a:ibm:tririga_application_platform:3.8:*:*:*:*:*:*:*
ibmtririga_application_platform4.0cpe:2.3:a:ibm:tririga_application_platform:4.0:*:*:*:*:*:*:*
ibmtririga_application_platform4.1cpe:2.3:a:ibm:tririga_application_platform:4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tririga_application_platform	3.6	cpe:2.3:a:ibm:tririga_application_platform:3.6:::::::*
ibm	tririga_application_platform	2.7	cpe:2.3:a:ibm:tririga_application_platform:2.7:::::::*
ibm	tririga_application_platform	3.8	cpe:2.3:a:ibm:tririga_application_platform:3.8:::::::*
ibm	tririga_application_platform	4.0	cpe:2.3:a:ibm:tririga_application_platform:4.0:::::::*
ibm	tririga_application_platform	4.1	cpe:2.3:a:ibm:tririga_application_platform:4.1:::::::*