CVE-2016-5979
Estado: ModificadaBaja (2.7)—
IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
- Puntuación base: 2.7
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.79%
- Percentil entre todas las CVEs puntuadas: 55
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-5979",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 2.7,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "HIGH",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 1.2
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM Corporation",
"product": "Distributed Marketing",
"versions": [
{
"status": "affected",
"version": "8.6, 9.0, 9.1, 9.1.1, 9.1.2, 10.0"
}
]
}
]
}
],
"published": "2017-05-15T21:29:00.160",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21999526",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21999526",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379."
},
{
"lang": "es",
"value": "IBM Distributed Marketing versiones 8.6, 9.0 y 10.0 podrían permitir a un usuario autenticado privilegiado crear una instancia con un perfil de seguridad no válido para las plantillas, lo que hace que la nueva instancia no sea accesible para el usuario deseado. IBM X-Force ID: 116379."
}
],
"lastModified": "2026-06-17T00:50:19.747",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67832F29-CC33-43DE-BE61-5534B2DCD03E"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E07F67BB-3375-4DF4-8AF3-36CEAAED1E3A"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "105A9EF4-2E1A-4767-AD48-B92518A64228"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3BB5AD2-1406-4FE3-81DB-327D9DCA52B0"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5307A8E9-242B-4611-A38B-7E405494D03D"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8955F28-80E7-4502-8966-1B78360ED1CB"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E707E0E-AD8A-4273-A1DC-9C9AF439BE76"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94826336-9D81-4938-8FCE-29E8A14ECCF5"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD0BD92F-8D2F-4FAF-9347-CE5D0E3F1DEB"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5141CC6E-5A80-4D1E-BD98-EB2C367757C5"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E69AC4F-A5CB-4270-9AE7-706D4D59F61F"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C86CC0AB-D59E-401C-84F1-99CF8C990948"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6652814-6B3F-443E-8835-26E9855D4865"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6160C9D7-1D0D-4629-9737-C2ACDC9F3E31"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "926F4B79-4FCB-4FA3-AC95-C25ECB3F1D35"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC36D3BD-3E2D-47DA-BFB2-E8CBF2AB58C0"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C45C881-64C9-4CDA-98BF-23EBB907D261"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6899C928-6405-4705-A90A-F990802001E5"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C3985E1-C59A-41CD-ADFF-7D3343CAF862"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1022D02B-7188-4671-B984-A451FBF9366D"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C59AE8BF-5D3A-4E97-848E-D40FC94B076E"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE26C3E0-3A66-42BD-974C-97DBD77C2BA7"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F5A30A6-78AE-4AFF-AADB-DE2180AF4BCE"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61082BF4-3F8F-4601-BAA4-6135697C4FAC"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62F654DB-E72E-4746-A059-F0FE6B46C889"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:10.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E63FD79-9964-45C8-BE39-22D37ACECECD"
},
{
"criteria": "cpe:2.3:a:ibm:distributed_marketing:10.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF666DC1-CA43-4C1B-8037-9A852E60119A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}