CVE-2016-0239
HighSummary
IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allow remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to sensitive data and allow attackers to perform administrative actions within the system.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and restrict system access to trusted users.
Other vulnerabilities in IBM Security Guardium Database Activity Monitor
See all- CVE-2016-6065High
The IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
- CVE-2016-0328High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow local users to obtain administrator privileges for command execution via unspecified vectors.
- CVE-2016-0241High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
- CVE-2016-0236High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to execute arbitrary commands with root privileges via the search field.
- CVE-2016-0249High
CVE-2016-0249 describes an SQL injection vulnerability in IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Original NVD description (English source)
IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.