PT-2017-10285 · Ibm · Ibm Infosphere Master Data Management

Publicado 2017-07-31 · Atualizado 2017-08-03 · CVE-2016-9717

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Infosphere Master Data Management (MDM) versions 10.1 through 11.6

Description The issue allows attackers to expose duplicated parameters, potentially producing anomalous behavior in the application that can be exploited.

Recommendations For IBM Infosphere Master Data Management (MDM) versions 10.1 through 11.6, consider restricting access to sensitive parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-9717

Produtos afetados

Ibm Infosphere Master Data Management

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/119730 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9717 · Nota de Segurança
• http://securityfocus.com/bid/100074 · Nota
• http://ibm.com/support/docview.wss?uid=swg22006605 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9717 · Aviso do Fabricante