PT-2017-13616 · Ibm · Ibm Infosphere Information Server

Goh Zhi Hao + 2 · Publicado 2017-08-02 · Atualizado 2019-10-03 · CVE-2017-1468

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5

Description The issue allows a local user to gain elevated privileges by placing arbitrary files in installation directories.

Recommendations For IBM InfoSphere Information Server version 9.1, restrict access to installation directories to prevent arbitrary file placement. For IBM InfoSphere Information Server version 11.3, limit user privileges to prevent exploitation. For IBM InfoSphere Information Server version 11.5, consider implementing additional security measures to prevent unauthorized file placement in installation directories.

Correção

Identificadores relacionados

CVE-2017-1468

Produtos afetados

Ibm Infosphere Information Server

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/128467 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1468 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1468 · Aviso do Fabricante
• http://securityfocus.com/bid/100099 · Nota
• http://ibm.com/support/docview.wss?uid=swg22006067 · Aviso do Fabricante