HTTP Parameter Override Vulnerability in IBM Infosphere Master Data Management
CVE-2016-9717

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Infosphere Master Data Management
Vendor
CVE Published:
31 July 2017

Summary

The HTTP Parameter Override vulnerability in IBM Infosphere Master Data Management allows attackers to exploit the presence of duplicated parameters within the application. This anomaly can lead to unexpected behaviors, potentially compromising the integrity and security of the data handling processes. Affected versions include 10.1, 11.0, 11.3 through 11.6, making it crucial for users to ensure their systems are updated and secured against possible exploits.

Affected Version(s)

InfoSphere Master Data Management 10.1

InfoSphere Master Data Management 11.0

InfoSphere Master Data Management 11.3

References

http://www.securityfocus.com/bid/100074
vdb-entryx_refsource_BID
http://www.ibm.com/support/docview.wss?uid=swg22006605
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/119730
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.