CVE-2016-0298: Infoleak
Published Jun 29, 2016
·Updated
Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL.
Affected Software
1 affected component
IBM Security Guardium<=10.0
Event History
Jun 29, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0298?
CVE-2016-0298 has a medium severity level due to its directory traversal nature.
2
How do I fix CVE-2016-0298?
To fix CVE-2016-0298, upgrade IBM Security Guardium Database Activity Monitor to version 10.0p100 or later.
3
What type of vulnerability is CVE-2016-0298?
CVE-2016-0298 is a directory traversal vulnerability that allows remote authenticated users to access arbitrary files.
4
Which versions of IBM Security Guardium are affected by CVE-2016-0298?
IBM Security Guardium Database Activity Monitor versions before 10.0p100 are affected by CVE-2016-0298.
5
Can CVE-2016-0298 be exploited remotely?
Yes, CVE-2016-0298 can be exploited remotely by authenticated users via a crafted URL.