CVE-2015-4927

2015-11-0403:59:03

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.1%

JSON

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file.

Affected configurations

Nvd

Node

ibmtivoli_storage_managerMatch6.3.3

ibmtivoli_storage_managerMatch6.3.4

ibmtivoli_storage_managerMatch6.3.5

ibmtivoli_storage_managerMatch6.3.5.1

ibmtivoli_storage_managerMatch7.1

ibmtivoli_storage_managerMatch7.1.1

ibmtivoli_storage_managerMatch7.1.2

VendorProductVersionCPE
ibmtivoli_storage_manager6.3.3cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.3.4cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.3.5cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.3.5.1cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager7.1cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager7.1.1cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager7.1.2cpe:2.3:a:ibm:tivoli_storage_manager:7.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_storage_manager	6.3.3	cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:::::::*
ibm	tivoli_storage_manager	6.3.4	cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:::::::*
ibm	tivoli_storage_manager	6.3.5	cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:::::::*
ibm	tivoli_storage_manager	6.3.5.1	cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:::::::*
ibm	tivoli_storage_manager	7.1	cpe:2.3:a:ibm:tivoli_storage_manager:7.1:::::::*
ibm	tivoli_storage_manager	7.1.1	cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:::::::*
ibm	tivoli_storage_manager	7.1.2	cpe:2.3:a:ibm:tivoli_storage_manager:7.1.2:::::::*