PT-2015-1619 · Ibm · Ibm Infosphere Information Server

Published 2015-06-28 · Updated 2016-11-30 · CVE-2015-1901

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 through 11.3 before 11.3.1.2

Description The issue is related to the installer in IBM InfoSphere Information Server, which lacks protection of internal data. This allows a local attacker to obtain sensitive information using standard commands.

Recommendations For versions 8.5 through 11.3 before 11.3.1.2, update to version 11.3.1.2 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-10954

CVE-2015-1901

Affected Products

Ibm Infosphere Information Server

References · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg21701436 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1901 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR52549 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10954 · Security Note
• http://securitytracker.com/id/1032633 · Note
• http://securityfocus.com/bid/75162 · Note