PT-2017-13616 · Ibm · Ibm Infosphere Information Server

Goh Zhi Hao + 2 · Published 2017-08-02 · Updated 2019-10-03 · CVE-2017-1468

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5

Description The issue allows a local user to gain elevated privileges by placing arbitrary files in installation directories.

Recommendations For IBM InfoSphere Information Server version 9.1, restrict access to installation directories to prevent arbitrary file placement. For IBM InfoSphere Information Server version 11.3, limit user privileges to prevent exploitation. For IBM InfoSphere Information Server version 11.5, consider implementing additional security measures to prevent unauthorized file placement in installation directories.

Fix

Related Identifiers

CVE-2017-1468

Affected Products

Ibm Infosphere Information Server

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/128467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1468 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1468 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22006067 · Vendor Advisory
• http://securityfocus.com/bid/100099 · Note