CVE-2016-2945

high

Description

The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.

References

http://www.securityfocus.com/bid/91517

http://www-01.ibm.com/support/docview.wss?uid=swg21984502

http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450

Details

Source: Mitre, NVD

Published: 2016-07-08

Updated: 2026-05-06

Risk Information

CVSS v2

Base Score: 6

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00633

Detections

Analytics