{"containers": {"cna": {"affected": [{"product": "Cloud Orchestrator", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "2.2"}, {"status": "affected", "version": "2.2.0.1"}, {"status": "affected", "version": "2.3"}, {"status": "affected", "version": "2.4"}, {"status": "affected", "version": "2.3.0.1"}, {"status": "affected", "version": "2.4.0.1"}, {"status": "affected", "version": "2.4.0.2"}, {"status": "affected", "version": "2.5"}, {"status": "affected", "version": "2.5.0.1"}, {"status": "affected", "version": "2.4.0.3"}, {"status": "affected", "version": "2.5.0.2"}]}], "datePublic": "2016-11-18T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain."}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-09T10:57:02", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "94578", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94578"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000134"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-0202", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Cloud Orchestrator", "version": {"version_data": [{"version_value": "2.2"}, {"version_value": "2.2.0.1"}, {"version_value": "2.3"}, {"version_value": "2.4"}, {"version_value": "2.3.0.1"}, {"version_value": "2.4.0.1"}, {"version_value": "2.4.0.2"}, {"version_value": "2.5"}, {"version_value": "2.5.0.1"}, {"version_value": "2.4.0.3"}, {"version_value": "2.5.0.2"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "94578", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94578"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg2C1000134", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000134"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-0202", "datePublished": "2017-02-08T22:00:00", "dateReserved": "2015-12-08T00:00:00", "dateUpdated": "2017-02-09T10:57:02", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "8227C8AC-7AAC-4DD1-A998-81595B0352DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6982E71E-FD79-47A5-8060-56499F7D00B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "FE37CE11-6A58-4058-B3A0-5A223DC5601B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E747BF22-8A13-4073-967F-0C28055B2A45", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "A9B95F0E-F10A-4A0A-B675-73AD50A552B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "42AC5772-6E74-4B9C-815F-ED8C265FED53", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en tareas, objeto de backend generado para manejar cualquier acci\u00f3n realizada por la aplicaci\u00f3n en IBM Cloud Orchestrator. Para un usuario autenticado es posible ver cualquier tarea del dominio actual de los usuarios."}], "id": "CVE-2016-0202", "lastModified": "2017-02-15T12:39:17.533", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-08T22:59:00.277", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000134"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/94578"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}