PT-2015-5496 · Ibm · Ibm Infosphere Datastage

Published 2015-06-29 · Updated 2016-08-04 · CVE-2015-1900

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1 IBM InfoSphere DataStage versions 11.3 through 11.3.1.2

Description The issue allows local users to write to executable files and consequently obtain root privileges via unspecified vectors.

Recommendations For IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1, update to a version that is not affected by this issue. For IBM InfoSphere DataStage versions 11.3 through 11.3.1.2, update to a version that is not affected by this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1900

Affected Products

Ibm Infosphere Datastage

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1900 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21902280 · Vendor Advisory
• http://securityfocus.com/bid/75481 · Note