HTTP Parameter Override Vulnerability in IBM Infosphere Master Data Management
CVE-2016-9717
6.5MEDIUM
Summary
The HTTP Parameter Override vulnerability in IBM Infosphere Master Data Management allows attackers to exploit the presence of duplicated parameters within the application. This anomaly can lead to unexpected behaviors, potentially compromising the integrity and security of the data handling processes. Affected versions include 10.1, 11.0, 11.3 through 11.6, making it crucial for users to ensure their systems are updated and secured against possible exploits.
Affected Version(s)
InfoSphere Master Data Management 10.1
InfoSphere Master Data Management 11.0
InfoSphere Master Data Management 11.3
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved