IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root’s group memberships.
CPE | Name | Operator | Version |
---|---|---|---|
spss_modeler | eq | 16.0.0.0 |