CVE-2016-6065

Published: Feb 1, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.

Affected (8)

Products: Ibm: Security Guardium

1 product

Security Guardium

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium	Version 10.0.1
Ibm Security Guardium	Version 10.0
Ibm Security Guardium	Version 10.1.2
Ibm Security Guardium	Version 10.1
Ibm Security Guardium	Version 8.2
Ibm Security Guardium	Version 9.0
Ibm Security Guardium	Version 9.1
Ibm Security Guardium	Version 9.5

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21995657

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/95145

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www.ibm.com/support/docview.wss?uid=swg21995657

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/95145

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.