IBM Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to HTTP Parameter Override discovered in MDM User Interface (CVE-2016-9717)

IBM InfoSphere Master Data Management is vulnerable to a HTTP Parameter Override which may produce an anomalous behavior in the application that can be potentially exploited .

CVE(s): CVE-2016-9717

Affected product(s) and affected version(s):

This vulnerability is known to affect the following offerings:

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2eT7zKc
X-Force Database: http://ift.tt/2h98vur

The post IBM Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to HTTP Parameter Override discovered in MDM User Interface (CVE-2016-9717) appeared first on IBM PSIRT Blog.

Affected IBM InfoSphere Master Data Management Server	Affected Versions
IBM InfoSphere Master Data Management	10.1
IBM InfoSphere Master Data Management	11.0
IBM InfoSphere Master Data Management	11.3
IBM InfoSphere Master Data Management	11.4
IBM InfoSphere Master Data Management	11.5
IBM InfoSphere Master Data Management	11.6

from IBM Product Security Incident Response Team http://ift.tt/2eTkZFM