Information disclosure in RSA Data Loss Prevention - CVE-2016-0893

 

Information disclosure in RSA Data Loss Prevention - CVE-2016-0893

Published: May 3, 2016 / Updated: August 9, 2020


Vulnerability identifier: #VU40322
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-0893
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated user to gain access to sensitive information.

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages.


Affected software

RSA Data Loss Prevention

How to mitigate CVE-2016-0893

Install update from vendor's website.


External References

Related Security Bulletins