Security Bulletin: Vulnerabilities in IBM Tivoli Composite Application Manager Agent for Sybase ASE with potential for privilege escalation (CVE-2013-5467)

Summary

Privilege escalation vulnerability in the IBM Tivoli Composite Application Manager Agent for Sybase ASE could be exploited by a local user to gain elevated privilege of another user.

Vulnerability Details

CVEID: CVE-2013-5467
Description: Privilege escalation vulnerability could be exploited by a local user to gain elevated privilege of another user.

CVSS Base Score: 6.9
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/88370&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Affected Products and Versions

IBM Tivoli Composite Application Manager for Applications V7.2: Tivoli Composite Application Manager Agent for Sybase ASE 6.2.

Remediation/Fixes

The following are the fixes for Monitoring Agent for Sybase ASE:

The fix is bundled with IBM Tivoli Composite Application Manager for Applications V7.2.1.2.

Workarounds and Mitigations

Contact IBM Support for options.