Lucene search

K
cve[email protected]CVE-2015-0160
HistoryMay 25, 2015 - 2:59 p.m.

CVE-2015-0160

2015-05-2514:59:10
CWE-264
web.nvd.nist.gov
25
ibm security
siteprotector system
vulnerability
cve-2015-0160
remote execution
nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.

Affected configurations

NVD
Node
ibmsecurity_siteprotector_systemMatch3.0
OR
ibmsecurity_siteprotector_systemMatch3.0.0.1
OR
ibmsecurity_siteprotector_systemMatch3.0.0.2
OR
ibmsecurity_siteprotector_systemMatch3.0.0.3
OR
ibmsecurity_siteprotector_systemMatch3.0.0.4
OR
ibmsecurity_siteprotector_systemMatch3.0.0.5
OR
ibmsecurity_siteprotector_systemMatch3.0.0.6
OR
ibmsecurity_siteprotector_systemMatch3.1.0.0
OR
ibmsecurity_siteprotector_systemMatch3.1.0.1
OR
ibmsecurity_siteprotector_systemMatch3.1.0.2
OR
ibmsecurity_siteprotector_systemMatch3.1.0.3
OR
ibmsecurity_siteprotector_systemMatch3.1.1.0
OR
ibmsecurity_siteprotector_systemMatch3.1.1.1

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

Related for CVE-2015-0160