The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21979682 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2016-05-17T14:00:00
Updated: 2024-08-05T22:15:23.447Z
Reserved: 2015-12-08T00:00:00
Link: CVE-2016-0323
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2016-05-17T14:08:01.437
Modified: 2016-05-19T14:03:50.493
Link: CVE-2016-0323
Redhat
No data.