CVE-2016-6065
HighSummary
The IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system and potential takeover by a local user.
Recommendation
It is recommended to restrict access to the appliance to trusted users and to regularly update the software to mitigate this vulnerability.
Other vulnerabilities in IBM Security Guardium Database Activity Monitor
See all- CVE-2016-0328High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow local users to obtain administrator privileges for command execution via unspecified vectors.
- CVE-2016-0241High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
- CVE-2016-0239High
IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allow remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
- CVE-2016-0236High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to execute arbitrary commands with root privileges via the search field.
- CVE-2016-0249High
CVE-2016-0249 describes an SQL injection vulnerability in IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Original NVD description (English source)
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.