« Volver al listado

CVE-2016-6065

Estado: ModificadaAlta (7.8)—

IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Security Guardium

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6065",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM Corporation",
          "product": "Guardium",
          "versions": [
            {
              "status": "affected",
              "version": "2.5"
            },
            {
              "status": "affected",
              "version": "8.2"
            },
            {
              "status": "affected",
              "version": "9.0"
            },
            {
              "status": "affected",
              "version": "9.1"
            },
            {
              "status": "affected",
              "version": "10.0"
            },
            {
              "status": "affected",
              "version": "10"
            },
            {
              "status": "affected",
              "version": "9.5"
            },
            {
              "status": "affected",
              "version": "10.0.1"
            },
            {
              "status": "affected",
              "version": "10.1"
            },
            {
              "status": "affected",
              "version": "10.1.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-01T20:59:02.147",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21995657",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/95145",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21995657",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/95145",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root."
    },
    {
      "lang": "es",
      "value": "La aplicación IBM Security Guardium Database Activity Monitor podría permitir a un usuario local inyectar comandos que serían ejecutados como root."
    }
  ],
  "lastModified": "2026-06-17T00:50:25.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57130C1B-80A6-4A33-8AD3-5C6F4669F3E7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64C62744-22BD-4038-8257-822ADDAC370D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37342DD2-055B-429C-9231-2D9FE70B5AE5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "552A0A69-388F-4842-A882-78F267D4BF09"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9ACD03A-8D4C-4B94-81AB-D1BBD41E0182"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "148A8443-DF7A-42AA-8D86-128CCC1D871E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45E6B962-F8F8-4979-BC76-AE0B16EEB082"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}