CVEvulnerability

CVE-2016-9717

6.5 MEDIUM Published 2017-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-20

Description

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.

Affected configurations

• ibm infosphere master data management server 10.1 • ibm infosphere master data management server 11.0 • ibm infosphere master data management server 11.3 • ibm infosphere master data management server 11.4 • ibm infosphere master data management server 11.5 • ibm infosphere master data management server 11.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References