PT-2017-9908 · Ibm · Ibm Rhapsody Dm

Publicado 2017-03-20 · Atualizado 2017-03-23 · CVE-2016-8973

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 4.0 through 6.0

Description The issue allows an authenticated user to upload malicious files to the server, potentially leading to infection.

Recommendations For versions 4.0 through 6.0, update to a version that contains a fix for this issue, as no specific workaround is provided.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2016-8973

Produtos afetados

Ibm Rhapsody Dm

Referências · 4

• http://ibm.com/support/docview.wss?uid=swg21999960 · Aviso do Fabricante
• http://securityfocus.com/bid/96826 · Nota
• https://osv.dev/vulnerability/CVE-2016-8973 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8973 · Nota de Segurança