IBM Security Guardium Database Activity Monitor could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to view arbitrary files on the system.
CVE(s): CVE-2016-0298
Affected product(s) and affected version(s):
IBM Security Guardium Database Activity Monitor V10
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1VK76GR
X-Force Database: http://ift.tt/1ZuDzAe
from IBM Product Security Incident Response Team http://ift.tt/1VK6LUF
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.