PT-2017-8837 · Ibm · Ibm Distributed Marketing

Publicado 2017-05-15 · Atualizado 2017-05-23 · CVE-2016-5979

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Distributed Marketing versions 8.6 through 10.0

Description The issue allows a privileged authenticated user to create an instance with a security profile that is not valid for the templates. This results in the new instance not being accessible to the intended user.

Recommendations For versions 8.6 through 10.0, consider restricting the creation of new instances to prevent unauthorized access until a fix is available. As a temporary workaround, review and manually adjust the security profiles of newly created instances to ensure they are accessible to the intended users.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-5979

Produtos afetados

Ibm Distributed Marketing

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5979 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5979 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg21999526 · Aviso do Fabricante