CVE-2016-2908

Critical

Published: 01/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser.

Risk Assessment

A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.

Recommendation

It is recommended to update the software to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.