HTTP Parameter Override Vulnerability in IBM Infosphere Master Data Management
CVE-2016-9717

6.5MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
31 July 2017

Summary

The HTTP Parameter Override vulnerability in IBM Infosphere Master Data Management allows attackers to exploit the presence of duplicated parameters within the application. This anomaly can lead to unexpected behaviors, potentially compromising the integrity and security of the data handling processes. Affected versions include 10.1, 11.0, 11.3 through 11.6, making it crucial for users to ensure their systems are updated and secured against possible exploits.

Affected Version(s)

InfoSphere Master Data Management 10.1

InfoSphere Master Data Management 11.0

InfoSphere Master Data Management 11.3

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.