Security Bypass Vulnerability in IBM Campaign Software
CVE-2016-9749

4MEDIUM

Key Information:

Vendor: IBM
Status: Campaign
Vendor: CVE Published:; 9 November 2018

Summary

A vulnerability in IBM Campaign versions 9.1.0, 9.1.2, 10.0, and 10.1 allows an authenticated user with access to the local network to bypass security mechanisms due to insufficient input validation. This flaw can potentially lead to unauthorized access and manipulation of sensitive data within the software.

Affected Version(s)

Campaign 9.1.2

Campaign 10.0

Campaign 9.1.0

References

http://www.ibm.com/support/docview.wss?uid=ibm10738293

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/120206

vdb-entryx_refsource_XF

CVSS V3.1

Score:

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Nov 9, 2018
Vulnerability Reserved
Dec 1, 2016