Unscored severity · published Nov 8, 2015
CVE-2015-5005
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change…
–
CVSS
1.7%
EPSS
No
On KEV
Description
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Powerha System Mirror · Ibm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5005
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5005
Vendor Advisory
http://aix.software.ibm.com/aix/efixes/security/powerha_advisory.asc
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg1IV76943
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg1IV76946
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg1IV77007
www.securityfocus.com
http://www.securityfocus.com/bid/76948
More from Powerha System Mirror
4.3
CVE-2024-55897
IBM PowerHA SystemMirror for i information disclosure