{"id":"CVE-2016-5935","aliases":["EUVD-2016-6869","GHSA-4qjg-5hg6-r8j7"],"status":"published","title":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information,...","description":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00749,"percentile":0.552,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-02-02T22:00:00Z","modified":"2026-06-17T00:50:15Z","products":[{"vendor":"ibm","product":"dashboard_application_services_hub"},{"vendor":"ibm","product":"tivoli components"},{"vendor":"ibm corporation","product":"tivoli components"}],"references":[{"url":"http://www.securityfocus.com/bid/96003","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21997711","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5935"},{"url":"https://github.com/advisories/GHSA-4qjg-5hg6-r8j7"}],"sources":{"cve":[{"id":"CVE-2016-5935","description":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.","status":"published","published":"2017-02-02T22:00:00Z","modified":"2024-08-06T01:15:10.036Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6869","description":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.","status":"published","published":"2017-02-02T22:00:00Z","modified":"2024-08-06T01:15:10Z","updated_at":"2026-11-03T02:22:41.580609Z"}],"ghsa":[{"id":"GHSA-4qjg-5hg6-r8j7","title":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information,...","description":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.","status":"published","published":"2022-05-17T02:59:57Z","modified":"2023-01-27T05:06:39Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:57.782632Z"}],"nvd":[{"id":"CVE-2016-5935","description":"IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.","status":"published","published":"2017-02-02T22:59:00.137Z","modified":"2026-06-17T00:50:15.83Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:35.029632Z"}]}}