CVE-2016-0328

Опубликовано: 22 окт. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21990226
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93402
http://www-01.ibm.com/support/docview.wss?uid=swg21990226
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93402

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:8.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium_database_activity_monitor:10.01:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00144

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-fm27-fvhq-2r52