CVE-2016-0236

Опубликовано: 21 окт. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21990372
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93823
http://www-01.ibm.com/support/docview.wss?uid=swg21990372
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93823

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:8.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.01:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02993

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-48m9-9cxq-75r8