PT-2016-5253 · Ibm · Ibm Infosphere Streams+1
Published
2016-07-02
·
Updated
2016-07-06
·
CVE-2016-2867
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Streams versions prior to 4.0.1.2
IBM Streams versions prior to 4.1.1.1
Description
The issue is related to the improper implementation of the runAsUser feature, which allows local users to obtain root group privileges.
Recommendations
For IBM InfoSphere Streams versions prior to 4.0.1.2, update to version 4.0.1.2 or later.
For IBM Streams versions prior to 4.1.1.1, update to version 4.1.1.1 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Infosphere Streams
Ibm Streams