CVE-2016-0241

EUVD-2016-0276
IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
ibmsecurity_guardium_database_activity_monitor
8.2
ibmsecurity_guardium_database_activity_monitor
9.0
ibmsecurity_guardium_database_activity_monitor
9.1
ibmsecurity_guardium_database_activity_monitor
9.5
ibmsecurity_guardium_database_activity_monitor
10.0
ibmsecurity_guardium_database_activity_monitor
10.1
ibmsecurity_guardium_database_activity_monitor
10.01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21990219
http://www.securityfocus.com/bid/93828
http://www-01.ibm.com/support/docview.wss?uid=swg21990219
http://www.securityfocus.com/bid/93828