CVE-2016-9717 in InfoSphere Master Data Management

Riassunto

di MITRE

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 01/12/2016
• Divulgazione: 31/07/2017
• Moderazione: accettato
• Voce: VDB-104674
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.01117
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9717
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9717
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9717/