IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an “archaic” e-mail address in a response.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2958
Reference (s):
- AIXAPAR:LO90039
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039
- BID:94328
- URL: http://www.securityfocus.com/bid/94328
- http://www-01.ibm.com/support/docview.wss?uid=swg21990864