CVE-2016-0328
HighSummary
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow local users to obtain administrator privileges for command execution via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover of the database, posing a serious security threat to the organization.
Recommendation
It is recommended to update IBM Security Guardium Database Activity Monitor to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IBM Security Guardium Database Activity Monitor
See all- CVE-2016-6065High
The IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
- CVE-2016-0241High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
- CVE-2016-0239High
IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allow remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
- CVE-2016-0236High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to execute arbitrary commands with root privileges via the search field.
- CVE-2016-0249High
CVE-2016-0249 describes an SQL injection vulnerability in IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Original NVD description (English source)
IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors.