CVE-2016-6087 Information disclosure in Domino

Critical 9.8 Published 7 Jun 2017 Updated 6 Aug 2024

Attackers can steal credentials via TLS Key Exchange validation flaws in IBM Domino, risking account takeover and data exposure.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-6087?

CVE-2016-6087 is a critical vulnerability in IBM Domino, published on 7 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918.

Weakness: CWE-20

Which versions are affected by CVE-2016-6087?

It affects 1 product.

Products include Ibm Domino.

How do I fix CVE-2016-6087?

No fix has been published for CVE-2016-6087 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6087 being exploited?

There is no known exploitation of CVE-2016-6087 in the wild and no public exploit code.

Sources

Also known as GHSA-7c64-986h-xrf6.