PT-2017-8837 · Ibm · Ibm Distributed Marketing

Published 2017-05-15 · Updated 2017-05-23 · CVE-2016-5979

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Distributed Marketing versions 8.6 through 10.0

Description The issue allows a privileged authenticated user to create an instance with a security profile that is not valid for the templates. This results in the new instance not being accessible to the intended user.

Recommendations For versions 8.6 through 10.0, consider restricting the creation of new instances to prevent unauthorized access until a fix is available. As a temporary workaround, review and manually adjust the security profiles of newly created instances to ensure they are accessible to the intended users.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-5979

Affected Products

Ibm Distributed Marketing

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5979 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5979 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg21999526 · Vendor Advisory