CVE-2016-0239: High severity ibm infosphere guardium database activity monitoring vulnerability

Published Oct 22, 2016

Updated

IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.

Affected Software

5 affected components

IBM Security Guardium Database Activity Monitor=9.0

IBM Security Guardium Database Activity Monitor=9.1

IBM Security Guardium Database Activity Monitor=9.5

IBM Security Guardium Database Activity Monitor=10.0

IBM Security Guardium Database Activity Monitor=10.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21988999

Event History

Oct 22, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0239?

The severity of CVE-2016-0239 is considered critical due to the potential for remote authenticated users to escalate privileges.

How do I fix CVE-2016-0239?

To fix CVE-2016-0239, upgrade IBM Security Guardium Database Activity Monitor to version 9.5 p700 or 10.0.1 p100 or later.

What systems are affected by CVE-2016-0239?

CVE-2016-0239 affects IBM Security Guardium Database Activity Monitor versions 9.0, 9.1, 9.5, 10.0, and 10.0.1 before their respective patches.

Can CVE-2016-0239 be exploited remotely?

Yes, CVE-2016-0239 can be exploited remotely by authenticated users with elevated privileges.

What type of vulnerability is CVE-2016-0239?

CVE-2016-0239 is a privilege escalation vulnerability that allows unauthorized HTTP requests with administrator permissions.