Systemwalker Centric Manager Open Monitoring: SQL injection vulnerabilities (CVE-2016-10134). May 22nd, 2017

Notes on using this web page

1. Description

In the Zabbix bundled Systemwalker Centric Manager Open Monitoring, new SQL injection vulnerabilities(CVE-2016-10134) have been confirmed.

Fujitsu provides security patches shown in 3.
Please apply them as soon as possible.

2. Impact

For the Zabbix bundled with Systemwalker Centric Manager Open Monitoring, an SQL command may be executed.

For a severity assessment of this vulnerability, see CVE information in "4. Related information".

3. Affected systems and corresponding action

3-1. Affected systems:

PRIMERGY, PRIMEQUEST

3-2. Affected products and required patch

Note: Determining the affected product

Execute the following command in the console window: #/opt/FJSVftlz/bin/swpkginfo

3-3. Workaround

None.

4. Related information

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10134

5. Revision history

• May 22nd, 2017: Initial release