CVE-2016-0236

EUVD-2016-0271
IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
ibmsecurity_guardium_database_activity_monitor
8.2
ibmsecurity_guardium_database_activity_monitor
9.0
ibmsecurity_guardium_database_activity_monitor
9.1
ibmsecurity_guardium_database_activity_monitor
9.5
ibmsecurity_guardium_database_activity_monitor
10.0
ibmsecurity_guardium_database_activity_monitor
10.1
ibmsecurity_guardium_database_activity_monitor
10.01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21990372
http://www.securityfocus.com/bid/93823
http://www-01.ibm.com/support/docview.wss?uid=swg21990372
http://www.securityfocus.com/bid/93823