製品・ソフトウェアに関する情報

JVN脆弱性詳細

IBM Emptoris Strategic Supply Management Platform における情報漏えいに関する脆弱性

Title	IBM Emptoris Strategic Supply Management Platform における情報漏えいに関する脆弱性
Summary	IBM Emptoris Strategic Supply Management Platform には、情報漏えいに関する脆弱性が存在します。ベンダは、本脆弱性を IBM X-Force ID: 116881 として公開しています。
Possible impacts	情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 29, 2016, midnight
Registration Date	Sept. 8, 2017, 11:27 a.m.
Last Update	Sept. 8, 2017, 11:27 a.m.

CVSS3.0 : 警告
Score	5.9
Vector	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS2.0 : 警告
Score	4.3
Vector	AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected System

IBM

Emptoris Strategic Supply Management 10.0

Emptoris Strategic Supply Management 10.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-6029	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6029
National Vulnerability Database (NVD)
2	CVE-2016-6029	https://nvd.nist.gov/vuln/detail/CVE-2016-6029

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
IBM Support Document
1	2006799	http://www-01.ibm.com/support/docview.wss?uid=swg22006799

Change Log

No	Changed Details	Date of change
0	[2017年09月08日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2016-6029

Summary	IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881.
Publication Date	Aug. 15, 2017, 7:29 a.m.
Registration Date	Jan. 26, 2021, 2:14 p.m.
Last Update	Nov. 21, 2024, 11:55 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.9:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.10:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.9:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.12:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.15:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.11:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.14:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.13:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.10:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.4.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.ibm.com/support/docview.wss?uid=swg22006799	Patch Vendor Advisory
2	http://www.ibm.com/support/docview.wss?uid=swg22006799	Patch Vendor Advisory
3	https://exchange.xforce.ibmcloud.com/vulnerabilities/116881	VDB Entry Vendor Advisory
4	https://exchange.xforce.ibmcloud.com/vulnerabilities/116881	VDB Entry Vendor Advisory

Common Vulnerabilities List

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.9:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.10:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.9:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.12:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.15:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.11:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.14:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.13:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.0.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.1.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.1:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.10:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.7:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.5:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.2:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.2.8:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.0.6:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.0:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.3:::::::*
cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.0.4.0:::::::*