Description
IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698.
CVSS breakdown
CVSS 3.0
Privileges Required
Low
Availability
High
Scope
Unchanged
Integrity
High
Confidentiality
High
Attack Complexity
Low
Attack Vector
Network
User Interaction
None
RC
Changed
E
Unchanged
RL
O
Affected products
- ibm / security_guardium10.5 – 10.5