Unscored severity · published Aug 10, 2011
CVE-2011-3124
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Infosphere Datastage · Ibm
8.5; 8.5.0.1 · source: NVD
II
Infosphere Information Server · Ibm
8.5; 8.5.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3124
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3124
Vendor Advisory
http://secunia.com/advisories/45036
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg21504279
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg24030333
www.securityfocus.com
http://www.securityfocus.com/bid/48516
More from Infosphere Datastage
8.1
CVE-2016-6059
IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
6.1
CVE-2016-9000
IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection
5.4
CVE-2016-8999
IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker…
5.3
CVE-2016-8982
IBM InfoSphere Information Server stores sensitive information in URL parameters
–
CVE-2015-1900
IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via…