Lucene search

[email protected]CVE-2015-1947

HistoryDec 31, 2015 - 4:59 p.m.

CVE-2015-1947

2015-12-3116:59:00

[email protected]

web.nvd.nist.gov

cve-2015-1947

ibm infosphere biginsights

vulnerability

db2

local users

privileges

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

JSON

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program.

Affected configurations

NVD

Node

ibminfosphere_biginsightsMatch3.0.0.0

ibminfosphere_biginsightsMatch3.0.0.1

ibminfosphere_biginsightsMatch3.0.0.2

ibminfosphere_biginsightsMatch4.0.0.0

CPENameOperatorVersion
ibm:infosphere_biginsightsibm infosphere biginsightseq3.0.0.0
ibm:infosphere_biginsightsibm infosphere biginsightseq3.0.0.1
ibm:infosphere_biginsightsibm infosphere biginsightseq3.0.0.2
ibm:infosphere_biginsightsibm infosphere biginsightseq4.0.0.0

CPE	Name	Operator	Version
ibm:infosphere_biginsights	ibm infosphere biginsights	eq	3.0.0.0
ibm:infosphere_biginsights	ibm infosphere biginsights	eq	3.0.0.1
ibm:infosphere_biginsights	ibm infosphere biginsights	eq	3.0.0.2
ibm:infosphere_biginsights	ibm infosphere biginsights	eq	4.0.0.0

References

www-01.ibm.com/support/docview.wss?uid=swg21967131

www-304.ibm.com/support/docview.wss?uid=swg21970376

www.securityfocus.com/bid/79693

www.securitytracker.com/id/1034537

www.securitytracker.com/id/1034562

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

JSON

Related for CVE-2015-1947

nvd1 cvelist1 ibm3 prion1 nessus2