Lucene search

[email protected]CVE-2015-1992

HistoryAug 23, 2015 - 2:59 p.m.

CVE-2015-1992

2015-08-2314:59:00

[email protected]

web.nvd.nist.gov

ibm

systems director

cve-2015-1992

nvd

event processing

local users

privilege escalation

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Systems Director 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0, and 6.3.6.0 improperly processes events, which allows local users to gain privileges via unspecified vectors.

Affected configurations

NVD

Node

ibmsystems_directorMatch5.20

ibmsystems_directorMatch6.3.0.0

ibmsystems_directorMatch6.3.1.0

ibmsystems_directorMatch6.3.1.1

ibmsystems_directorMatch6.3.2.0

ibmsystems_directorMatch6.3.2.1

ibmsystems_directorMatch6.3.2.2

ibmsystems_directorMatch6.3.3.0

ibmsystems_directorMatch6.3.3.1

ibmsystems_directorMatch6.3.5.0

ibmsystems_directorMatch6.3.6.0

CPENameOperatorVersion
ibm:systems_directoribm systems directoreq5.20
ibm:systems_directoribm systems directoreq6.3.0.0
ibm:systems_directoribm systems directoreq6.3.1.0
ibm:systems_directoribm systems directoreq6.3.1.1
ibm:systems_directoribm systems directoreq6.3.2.0
ibm:systems_directoribm systems directoreq6.3.2.1
ibm:systems_directoribm systems directoreq6.3.2.2
ibm:systems_directoribm systems directoreq6.3.3.0
ibm:systems_directoribm systems directoreq6.3.3.1
ibm:systems_directoribm systems directoreq6.3.5.0

CPE	Name	Operator	Version
ibm:systems_director	ibm systems director	eq	5.20
ibm:systems_director	ibm systems director	eq	6.3.0.0
ibm:systems_director	ibm systems director	eq	6.3.1.0
ibm:systems_director	ibm systems director	eq	6.3.1.1
ibm:systems_director	ibm systems director	eq	6.3.2.0
ibm:systems_director	ibm systems director	eq	6.3.2.1
ibm:systems_director	ibm systems director	eq	6.3.2.2
ibm:systems_director	ibm systems director	eq	6.3.3.0
ibm:systems_director	ibm systems director	eq	6.3.3.1
ibm:systems_director	ibm systems director	eq	6.3.5.0

Rows per page:

1-10 of 111

References

www-01.ibm.com/support/docview.wss?uid=nas7d9a0db411a9071e986257e8c0029b365

www-01.ibm.com/support/docview.wss?uid=swg1IT08185

www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098524

www.securitytracker.com/id/1033653

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-1992

nvd1 cvelist1 ibm2 prion1