PT-2017-10285 · Ibm · Ibm Infosphere Master Data Management

Published 2017-07-31 · Updated 2017-08-03 · CVE-2016-9717

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Infosphere Master Data Management (MDM) versions 10.1 through 11.6

Description The issue allows attackers to expose duplicated parameters, potentially producing anomalous behavior in the application that can be exploited.

Recommendations For IBM Infosphere Master Data Management (MDM) versions 10.1 through 11.6, consider restricting access to sensitive parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-9717

Affected Products

Ibm Infosphere Master Data Management

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/119730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9717 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22006605 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9717 · Vendor Advisory
• http://securityfocus.com/bid/100074 · Note