CVE-2016-0396 Command injection in BigFix Platform

High 8.1 Published 1 Feb 2017 Updated 5 Aug 2024

Attackers can inject commands executed with higher privileges in IBM Tivoli Endpoint Manager, leading to code execution and privilege escalation.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-0396?

CVE-2016-0396 is a high-severity command injection vulnerability in IBM Corporation BigFix Platform, published on 1 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected.

Weakness: CWE-77

Which versions are affected by CVE-2016-0396?

It affects 1 product.

Products include Ibm Bigfix Platform.

How do I fix CVE-2016-0396?

No fix has been published for CVE-2016-0396 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2016-0396 being exploited?

There is no known exploitation of CVE-2016-0396 in the wild and no public exploit code.

Sources

Also known as GHSA-gf92-h6xm-4g8p.