Remote File Upload Vulnerability in IBM Spectrum Control
CVE-2016-5945

4.3MEDIUM

Key Information:

Vendor: IBM
Status: Spectrum Control
Vendor: CVE Published:; 26 September 2016

Summary

IBM Spectrum Control versions prior to 5.2.11 are vulnerable to a remote file upload vulnerability that allows remote authenticated users to exploit the system by uploading non-executable files through crafted HTTP requests. This issue opens the door for unauthorized access and potential manipulation of server-side applications.

References

http://www.securityfocus.com/bid/93082

vdb-entryx_refsource_BID

http://www-01.ibm.com/support/docview.wss?uid=swg21988625

x_refsource_CONFIRM

http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944

vendor-advisoryx_refsource_AIXAPAR

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Sep 26, 2016
Vulnerability Reserved
Jun 29, 2016

.

🍪 This website uses cookies, like every other website on the internet 😕 By using our website, you consent to the use of cookies.