PatchSiren

PatchSiren cyber security CVE debrief

CVE-2016-6080 IBM CVE debrief

CVE-2016-6080 is an information disclosure issue affecting the WebAdmin context in IBM WebSphere Message Broker 8.0. The vulnerable component can allow directory listings, which may reveal sensitive information to an attacker. The issue is rated medium severity (CVSS 5.3) and is documented by NVD with IBM PSIRT references to a vendor advisory and patch guidance.

Vendor
IBM
Product
CVE-2016-6080
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2017-02-01
Original CVE updated
2026-05-13
Advisory published
2017-02-01
Advisory updated
2026-05-13

Who should care

IBM WebSphere Message Broker 8.0 administrators, security teams, and operators responsible for any environment where the WebAdmin context is reachable from untrusted networks or broader internal segments.

Technical summary

NVD describes the flaw as a directory listing exposure in the WebAdmin context for IBM WebSphere Message Broker, with confidentiality impact only (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The mapped weakness is CWE-200, indicating exposure of sensitive information. The affected CPE in the supplied corpus is IBM WebSphere Message Broker 8.0.

Defensive priority

Medium priority. The issue does not indicate integrity or availability impact, but it can disclose sensitive data and should be addressed promptly if the WebAdmin interface is exposed.

Recommended defensive actions

  • Apply the IBM patch or remediation guidance referenced in the vendor advisory.
  • Review whether the WebAdmin context is reachable from untrusted or unnecessary network locations and restrict access where possible.
  • Confirm that any exposed administrative endpoints are limited to authorized users and monitored for unexpected access.
  • Validate affected instances of IBM WebSphere Message Broker 8.0 against the advisory before and after remediation.

Evidence notes

This debrief is based only on the supplied NVD record and referenced IBM/third-party links. The corpus states that the WebAdmin context for WebSphere Message Broker allows directory listings that may disclose sensitive information. NVD maps the issue to IBM WebSphere Message Broker 8.0, CVSS 3.0 vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, and CWE-200. PublishedAt is 2017-02-01T20:59:02.207Z; modifiedAt is 2026-05-13T00:24:29.033Z.

Official resources

Publicly disclosed in the NVD record published on 2017-02-01, with IBM PSIRT references included in the source corpus.