PT-2016-3796 · Ibm · Ibm Spss Statistics

Publicado 2016-01-01 · Atualizado 2016-12-07 · CVE-2015-7489

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics versions 22.0.0.2 before IF10 IBM SPSS Statistics versions 23.0.0.2 before IF7

Description The issue allows local users to gain privileges by modifying a Python script due to weak permissions set for these scripts. The weak permissions, specifically 'Everyone: Write', enable unauthorized access and modification of the scripts.

Recommendations For IBM SPSS Statistics version 22.0.0.2 before IF10, update to a version that includes IF10 or later to resolve the issue. For IBM SPSS Statistics version 23.0.0.2 before IF7, update to a version that includes IF7 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-7489

Produtos afetados

Ibm Spss Statistics

Referências · 3

• http://securitytracker.com/id/1034546 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21973502 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7489 · Nota de Segurança