PT-2021-22333 · Ibm · Ibm Spss Statistics

Ido Hoorvitch · Published 2021-11-17 · Updated 2021-11-19 · CVE-2021-38959

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics for Windows versions 24.0 through 28.0

Description The issue allows a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system.

Recommendations For versions 24.0 through 28.0, consider restricting write access to admin protected directories to prevent arbitrary file writing until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-38959

Affected Products

Ibm Spss Statistics

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-38959 · Security Note
• https://ibm.com/support/pages/node/6516680 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/212046 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38959 · Vendor Advisory