PT-2017-8903 · Ibm · Ibm Distributed Marketing/Marketing Platform

Publicado 2017-05-22 · Atualizado 2017-05-31 · CVE-2016-6112

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Distributed Marketing and Marketing Platform versions 8.6 through 10.0

Description The issue allows an authenticated user to escalate their privileges and gain administrative permissions over the web application.

Recommendations For versions 8.6 through 10.0, update to a version that includes a fix for this issue to prevent privilege escalation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-6112

Produtos afetados

Ibm Distributed Marketing/Marketing Platform

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-6112 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg21992739 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6112 · Aviso do Fabricante