IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2882
Reference (s):
- BID:91552
- URL: http://www.securityfocus.com/bid/91552
- http://www-01.ibm.com/support/docview.wss?uid=swg21983343