CVE-2016-6112
high
CVSS v3
8.8
CVSS v2
6.5
VIR risk
8.8
Description
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282.
Predictions
Exploit likelihood
92%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg21992739
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | marketing_platform | 8.6.0.0 | |
| ibm | marketing_platform | 9.0.0.0 | |
| ibm | marketing_platform | 9.1.0.0 | |
| ibm | marketing_platform | 9.1.2.0 | |
| ibm | marketing_platform | 10.0 | |
| ibm | marketing_operations | 8.6.0.0 | |
| ibm | marketing_operations | 9.0.0.0 | |
| ibm | marketing_operations | 9.1.0.0 | |
| ibm | marketing_operations | 10.0.0.0 | |
| ibm | distributed_marketing | 8.6.0.0 | |
| ibm | distributed_marketing | 9.0.0.0 | |
| ibm | distributed_marketing | 9.1.0.0 | |
| ibm | distributed_marketing | 10.0.0.0 | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.