Medium severity6.5NVD Advisory· Published May 17, 2016· Updated Jun 17, 2026

CVE-2016-0323

Description

The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors.

Affected products

IBM/Bluemix
cpe:2.3:a:ibm:bluemix:-:*:*:*:*:*:*:*
IBM/Liberty for Javallm-fuzzy
Range: <2.7-20160321-1358

Patches

Vulnerability mechanics

References

www-01.ibm.com/support/docview.wssnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000