CVE-2016-0310

Description

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain.

Affected products

• IBM Corporation / Connections4.5 – 4.5
• IBM Corporation / Connections3.0 – 3.0
• IBM Corporation / Connections3.0.1 – 3.0.1
• IBM Corporation / Connections3.0.1.1 – 3.0.1.1
• IBM Corporation / Connections4.0 – 4.0
• IBM Corporation / Connections5.0 – 5.0
• IBM Corporation / Connections5.5 – 5.5

References

• MISChttp://www.ibm.com/support/docview.wss?uid=swg21988338
• MISChttp://www.securityfocus.com/bid/92437