CVE-2016-5979

{"id": "CVE-2016-5979", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2017-05-15T21:29:00.160", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg21999526", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379."}, {"lang": "es", "value": "IBM Distributed Marketing versiones 8.6, 9.0 y 10.0 podr\u00edan permitir a un usuario autenticado privilegiado crear una instancia con un perfil de seguridad no v\u00e1lido para las plantillas, lo que hace que la nueva instancia no sea accesible para el usuario deseado. IBM X-Force ID: 116379."}], "lastModified": "2017-05-23T15:54:29.543", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67832F29-CC33-43DE-BE61-5534B2DCD03E"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E07F67BB-3375-4DF4-8AF3-36CEAAED1E3A"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "105A9EF4-2E1A-4767-AD48-B92518A64228"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3BB5AD2-1406-4FE3-81DB-327D9DCA52B0"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5307A8E9-242B-4611-A38B-7E405494D03D"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8955F28-80E7-4502-8966-1B78360ED1CB"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E707E0E-AD8A-4273-A1DC-9C9AF439BE76"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94826336-9D81-4938-8FCE-29E8A14ECCF5"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD0BD92F-8D2F-4FAF-9347-CE5D0E3F1DEB"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:8.6.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5141CC6E-5A80-4D1E-BD98-EB2C367757C5"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E69AC4F-A5CB-4270-9AE7-706D4D59F61F"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C86CC0AB-D59E-401C-84F1-99CF8C990948"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6652814-6B3F-443E-8835-26E9855D4865"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6160C9D7-1D0D-4629-9737-C2ACDC9F3E31"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "926F4B79-4FCB-4FA3-AC95-C25ECB3F1D35"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC36D3BD-3E2D-47DA-BFB2-E8CBF2AB58C0"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C45C881-64C9-4CDA-98BF-23EBB907D261"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6899C928-6405-4705-A90A-F990802001E5"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C3985E1-C59A-41CD-ADFF-7D3343CAF862"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1022D02B-7188-4671-B984-A451FBF9366D"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C59AE8BF-5D3A-4E97-848E-D40FC94B076E"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE26C3E0-3A66-42BD-974C-97DBD77C2BA7"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F5A30A6-78AE-4AFF-AADB-DE2180AF4BCE"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61082BF4-3F8F-4601-BAA4-6135697C4FAC"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:9.1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62F654DB-E72E-4746-A059-F0FE6B46C889"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:10.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E63FD79-9964-45C8-BE39-22D37ACECECD"}, {"criteria": "cpe:2.3:a:ibm:distributed_marketing:10.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF666DC1-CA43-4C1B-8037-9A852E60119A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}