Code injection

2015-11-1203:59:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

JSON

The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.

CPENameOperatorVersion
system_networking_switch_centerle7.3.1.4
switch_centerle8.1.1.0

CPE	Name	Operator	Version
	system_networking_switch_center	le	7.3.1.4
	switch_center	le	8.1.1.0

References

www.zerodayinitiative.com/advisories/ZDI-15-551/

support.lenovo.com/us/en/product_security/len_2015_074