Unscored severity · published Jun 29, 2015
CVE-2015-1900
IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via…
–
CVSS
0.4%
EPSS
No
On KEV
Description
IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Infosphere Datastage · Ibm
8.1; 8.5; 8.7; 9.1; 11.3; 11.3.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1900
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1900
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52770
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21902280
Third Party Advisory
http://www.securityfocus.com/bid/75481
More from Infosphere Datastage
8.1
CVE-2016-6059
IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
6.1
CVE-2016-9000
IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection
5.4
CVE-2016-8999
IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker…
5.3
CVE-2016-8982
IBM InfoSphere Information Server stores sensitive information in URL parameters
–
CVE-2012-0701
The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access…