CVE-2016-0203

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-08 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to.

Affected products

IBM Cloud Orchestrator: 2.4, 2.4.0.1, 2.4.0.2, 2.4.0.3, 2.5, 2.5.01
IBM Smartcloud Orchestrator: 2.3, 2.3.0.1

References

http://www.ibm.com/support/docview.wss?uid=swg2C1000140
http://www.securityfocus.com/bid/94440
http://www.ibm.com/support/docview.wss?uid=swg2C1000140
http://www.securityfocus.com/bid/94440

Get alerted when CVE-2016-0203 or the next vulnerability affects your stack