CVE-2015-1900

IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21902280	Patch Vendor Advisory
http://www.securityfocus.com/bid/75481	Third Party Advisory VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21902280	Patch Vendor Advisory
http://www.securityfocus.com/bid/75481	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:infosphere_datastage:8.1:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:8.5:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:8.7:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:9.1:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:11.3:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:11.3.1:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:11.3.1.2:::::::*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:26

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21902280 - Patch, Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21902280 - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/75481 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/75481 - Third Party Advisory, VDB Entry

Information

Published : 2015-06-29 10:59

Updated : 2024-11-21 02:26

NVD link : CVE-2015-1900

Mitre link : CVE-2015-1900

CVE.ORG link : CVE-2015-1900

JSON object : View

Products Affected

linux

linux_kernel

ibm

infosphere_datastage

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-1900", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-06-29T10:59:02.157", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902280", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/75481", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902280", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/75481", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors."}, {"lang": "es", "value": "IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, y 11.3 hasta 11.3.1.2 en UNIX permite a usuarios locales escribir en ficheros ejecutables, y como consecuencia obtener privilegios root, a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:26:22.070", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:infosphere_datastage:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "965287C1-1C98-42E6-94C3-3DB67CC50E48"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1E57DBA-34A3-4CA8-AA8D-6055DC756779"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CB1760D-FED4-4430-9CFB-83608956E424"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EADE407-3A84-49ED-B818-63B42EE47EBA"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEE407E4-910C-4AF1-B87B-F9B01759DDFC"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD554818-742B-4033-B9FB-DD6E9BF76A8E"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18580D4F-73AA-4D5E-998D-92A0012B810D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}