{"containers": {"cna": {"affected": [{"product": "Cloud Orchestrator", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "2.2"}, {"status": "affected", "version": "2.2.0.1"}, {"status": "affected", "version": "2.3"}, {"status": "affected", "version": "2.4"}, {"status": "affected", "version": "2.3.0.1"}, {"status": "affected", "version": "2.4.0.1"}, {"status": "affected", "version": "2.4.0.2"}, {"status": "affected", "version": "2.5"}, {"status": "affected", "version": "2.5.0.1"}, {"status": "affected", "version": "2.4.0.3"}, {"status": "affected", "version": "2.5.0.2"}]}], "datePublic": "2016-11-18T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to."}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-09T10:57:02", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "94440", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94440"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000140"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-0203", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Cloud Orchestrator", "version": {"version_data": [{"version_value": "2.2"}, {"version_value": "2.2.0.1"}, {"version_value": "2.3"}, {"version_value": "2.4"}, {"version_value": "2.3.0.1"}, {"version_value": "2.4.0.1"}, {"version_value": "2.4.0.2"}, {"version_value": "2.5"}, {"version_value": "2.5.0.1"}, {"version_value": "2.4.0.3"}, {"version_value": "2.5.0.2"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "94440", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94440"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg2C1000140", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000140"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-0203", "datePublished": "2017-02-08T22:00:00", "dateReserved": "2015-12-08T00:00:00", "dateUpdated": "2017-02-09T10:57:02", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "FE37CE11-6A58-4058-B3A0-5A223DC5601B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E747BF22-8A13-4073-967F-0C28055B2A45", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "A9B95F0E-F10A-4A0A-B675-73AD50A552B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "42AC5772-6E74-4B9C-815F-ED8C265FED53", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.5:*:*:*:*:*:*:*", "matchCriteriaId": "A66F93C9-05D1-4E81-A188-44BB0BDA3BC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_orchestrator:2.5.01:*:*:*:*:*:*:*", "matchCriteriaId": "88593BE3-6DB2-46B6-99B5-973D35C32BAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:smartcloud_orchestrator:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "2AB97A11-E8E6-4AFB-A72E-3345E36FE73C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:smartcloud_orchestrator:2.3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "9F658E9A-A6CA-4B00-B3B8-6261A8386B8B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en la API task en IBM Cloud Orchestrator. La API task podr\u00eda permitir a un usuario autenticado ver informaci\u00f3n de fondo asociada con acciones realizadas en m\u00e1quinas virtuales en proyectos a los que pertenece el usuario."}], "id": "CVE-2016-0203", "lastModified": "2017-02-15T14:13:32.270", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-08T22:59:00.307", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg2C1000140"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/94440"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}