Code injection

2018-12-0517:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating access permissions. IBM X-Force ID: 153382.

CPENameOperatorVersion
campaignge9.1.0
campaignlt9.1.0.13
campaignge9.1.2
campaignlt9.1.2.7

Name	Operator	Version
campaign	ge	9.1.0
campaign	lt	9.1.0.13
campaign	ge	9.1.2
campaign	lt	9.1.2.7

References

exchange.xforce.ibmcloud.com/vulnerabilities/153382

www.ibm.com/support/docview.wss?uid=ibm10743115