CVE-2016-0236: Command Injection

Published Oct 21, 2016

Updated

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.

Affected Software

7 affected components

IBM Security Guardium Database Activity Monitor=8.2

IBM Security Guardium Database Activity Monitor=9.0

IBM Security Guardium Database Activity Monitor=9.1

IBM Security Guardium Database Activity Monitor=9.5

IBM Security Guardium Database Activity Monitor=10.0

IBM Security Guardium Database Activity Monitor=10.1

IBM Security Guardium Database Activity Monitor=10.01

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21990372

Event History

Oct 21, 2016

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0236?

CVE-2016-0236 is classified as a high severity vulnerability due to its potential for remote authenticated users to execute arbitrary commands with root privileges.

How do I fix CVE-2016-0236?

To fix CVE-2016-0236, update IBM Security Guardium Database Activity Monitor to versions 8.2 p310, 9.5 p700, or 10.1 p100 or later.

Who is affected by CVE-2016-0236?

CVE-2016-0236 affects IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x before p700, and 10.x before p100.

What could an attacker do with CVE-2016-0236?

An attacker exploiting CVE-2016-0236 could execute arbitrary commands with root privileges on affected systems.

Is CVE-2016-0236 a local or remote vulnerability?

CVE-2016-0236 is considered a remote vulnerability as it can be exploited by authenticated users from outside the target system.