PT-2015-5496 · Ibm · Ibm Infosphere Datastage

Publicado 2015-06-29 · Atualizado 2016-08-04 · CVE-2015-1900

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1 IBM InfoSphere DataStage versions 11.3 through 11.3.1.2

Description The issue allows local users to write to executable files and consequently obtain root privileges via unspecified vectors.

Recommendations For IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1, update to a version that is not affected by this issue. For IBM InfoSphere DataStage versions 11.3 through 11.3.1.2, update to a version that is not affected by this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1900

Produtos afetados

Ibm Infosphere Datastage

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770 · Aviso do Fabricante
• http://securityfocus.com/bid/75481 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1900 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21902280 · Aviso do Fabricante