CVE-2015-4991

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file.

CVSS v3 4.0 MEDIUM
CVSS v2.0 2.1 LOW

4.0^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PI46224	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21975663	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:spss_modeler:14.2.0.0:::::::*
	cpe:2.3:a:ibm:spss_modeler:14.2.0.1:::::::*
	cpe:2.3:a:ibm:spss_modeler:14.2.0.2:::::::*
	cpe:2.3:a:ibm:spss_modeler:14.2.0.3:::::::*
	cpe:2.3:a:ibm:spss_modeler:15.0.0.0:::::::*
	cpe:2.3:a:ibm:spss_modeler:15.0.0.1:::::::*
	cpe:2.3:a:ibm:spss_modeler:15.0.0.2:::::::*
	cpe:2.3:a:ibm:spss_modeler:15.0.0.3:::::::*
	cpe:2.3:a:ibm:spss_modeler:16.0.0.0:::::::*
	cpe:2.3:a:ibm:spss_modeler:16.0.0.1:::::::*
	cpe:2.3:a:ibm:spss_modeler:16.0.0.2:::::::*
	cpe:2.3:a:ibm:spss_modeler:17.0.0.0:::::::*
	cpe:2.3:a:ibm:spss_modeler:17.0.0.1:::::::*
	cpe:2.3:a:ibm:spss_modeler:17.1.0.0:::::::*

History

No history.

Information

Published : 2016-02-15 02:59

Updated : 2024-02-28 15:21

NVD link : CVE-2015-4991

Mitre link : CVE-2015-4991

CVE.ORG link : CVE-2015-4991

JSON object : View

Products Affected

ibm

spss_modeler

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2015-4991", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "published": "2016-02-15T02:59:04.700", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI46224", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21975663", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file."}, {"lang": "es", "value": "IBM SPSS Modeler 14.2 hasta la versi\u00f3n FP3 IF027, 15 hasta la versi\u00f3n FP3 IF015, 16 hasta la versi\u00f3n FP2 IF012, 17 hasta la versi\u00f3n FP1 IF018 y 17.1 hasta la versi\u00f3n IF008 incluye datos en texto plano no especificados en volcados de memoria, lo que permite a usuarios locales obtener informaci\u00f3n sensible mediante la lectura de un archivo volcado."}], "lastModified": "2016-03-10T19:34:56.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33D6F60D-F679-4C85-B027-4323A981C339"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32783B77-DC8F-4B95-A65B-54F2F6E02ECE"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E272BC66-8533-4503-A227-0FE0FE904631"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E1735E4-9732-4D01-B5E0-28A27BEE8415"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A99F1ED-82D2-47C4-A898-76290B78561C"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9513A4EE-E322-4BC2-8AF5-81620EB2CAD7"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "814C12D1-E08F-47E5-920C-D03033F77890"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEF4989D-7D60-4EC5-B98C-E387CB45D40D"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:16.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51490AA5-F121-48EC-8D30-0EA4585001B8"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:16.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C80AEAF9-B138-49E0-BE40-3AC940D04748"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:16.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8928F107-61AE-4826-BC2D-32EE6F2C385C"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:17.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22C3E411-8990-4266-A2C0-CF8F14476D42"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:17.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A80EAA2-21CF-4573-AAB0-3E5852CC2A7B"}, {"criteria": "cpe:2.3:a:ibm:spss_modeler:17.1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD8AA792-DA0E-41D3-A69E-001083BF278F"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}