PT-2021-17779 · Camunda · Camunda Modeler

Name of the Vulnerable Software and Affected Versions: Camunda Modeler versions through 4.6.0 Description: The issue allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile API...

Nico Rehwaldt camunda-modeler 安全漏洞

Nico Rehwaldt camunda-modeler is a Nico Rehwaldt open source application. Provides an integrated modeling solution for BPMN and DMN based on bpmn.io. A security vulnerability exists in Nico Rehwaldt camunda-modeler version 4.6.0 and earlier versions that allows arbitrary file access...

CVE-2020-4717

A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation. IBM X-Force ID: 187727...

CVE-2020-4717

CVE-2020-4717 : IBM SPSS Modeler Subscription Installer contains a local vulnerability where a user with create symbolic link permissions can write arbitrary files to protected paths during product installation. The issue is documented in IBM’s bulletin and linked X-Force entry. A remediation is ...

CVE-2020-4717

A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation. IBM X-Force ID: 187727...

Security Bulletin: Symbolic Link Permissions Problem Modeler Subscription Installer

Summary A security vulnerability in Modeler subscription installer on Windows platform has been remediated. The installer is used from msi and script to install the product. Vulnerability Details CVEID: CVE-2020-4717 DESCRIPTION: A vulnerability exists in IBM SPSS Modeler Subscription Installer...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-59703)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffers from a SQL injection...

Security Bulletin: SQL Injection Vulnerability Affects the Graphic Process Modeler in IBM Sterling B2B Integrator (CVE-2019-4680)

Summary IBM Sterling B2B Integrator has addressed SQL injection security vulnerability in the Graphic Process Modeler. Vulnerability Details CVEID: CVE-2019-4680 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially-crafte...

Security Bulletin: Windows DLL injection vulnerability with IBM Java Affects SPSS Modeler

Summary IBM® Runtime Environment Java™ Version JRE7, JRE8SR4FP10 and JRE8SR5FP25 used by IBM SPSS Modeler on windows platform has a windows dll injection vulnerability. The issues is addressed. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0....

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SPSS Modeler (CVE-2019-4473,CVE-2019-11771)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version JRE7SR10FP10, JRE8SR4FP10 and JRE8SR5FP25 used by IBM SPSS Modeler on AIX 64-bit pSeries platform. These issues were disclosed as part of the IBM Java SDK updates in July 2019. Vulnerability Details If you run yo...

Security Bulletin: A security vulnerability has been identified in multiple products that ship with IBM Predictive Customer Intelligence (CVE-2014-3566)

Summary IBM Cognos Business Intelligence, IBM Infosphere Integration Bus, IBM WebSphere MQ, IBM DB2 Enterprise Server, IBM HTTP Server and IBM SPSS Modeler are shipped as components of IBM Predictive Customer Intelligence. Information about security vulnerabilities affecting IBM Cognos Business...

Security Bulletin:A security vulnerability has been identified in IBM DB2 and IBM SPSS Modeler

Summary IBM DB2 and IBM SPSS Modeler are shipped as components of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 and IBM SPSS Modeler has been published their respective security bulletins. Vulnerability Details Please consult the Security...

Security Bulletin: Security vulnerabilities have been identified in multiple components shipped with IBM Intelligent Operations Center (August 2015)

Summary Multiple components are shipped with IBM Intelligent Operations Center. Information about security vulnerabilities affecting some components has been published in security bulletins. Vulnerability Details Consult the following security bulletins for vulnerability details: IBM WebSphere...

Security Bulletin: Vulnerabilities in GSKit affect IBM SPSS Modeler (CVE-2018-1447)

Summary Vulnerabilities were discovered in GSKit. IBM SPSS Modeler uses GSKit and addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-1447 DESCRIPTION: The GSKit CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak passwor...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Modeler

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ JRE6SR16FP20, JRE7SR9FP30, JRE7R1SR3FP30, JRE8SR2FP10, JRE8SR4FP1, used by Modeler These issues were disclosed as part of the IBM Java SDK updates in Jul 2017. Vulnerability Details If you run your own Java code using th...

Security Bulletin: Vulnerabilities in GSKit affect IBM SPSS Modeler (CVE-2015-7421, CVE-2015-7420)

Summary Vulnerabilities were discovered in GSKit. IBM SPSS Modeler uses GSKit and addressed the applicable CVE. Vulnerability Details CVEID: CVE-2015-7421 DESCRIPTION: A vulnerability in GSKit could allow a remote attacker to obtain sensitive information. The internal ICC PRNG pool state is...

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM SPSS Modeler (CVE-2016-0466, CVE-2015-7575, CVE-2016-0475)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 15, IBM SDK, Java Technology Edition, Version 7 Service Refresh 9 Fix Pack 20, IBM SDK, Java Technology Edition, Version 7R1 Service Refresh 3 Fix Pack 20 that are used by IBM SP...

Security Bulletin: Memory dump from Modeler executables contains cleartext strings (CVE-2015-4991)

Summary IBM SPSS Modeler store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. Vulnerability Details CVEID: CVE-2015-4991 DESCRIPTION: IBM SPSS Modeler store plain text data in memory dumps, which could allow ...

Security Bulletin: Vulnerability in Apache Commons affects IBM SPSS Modeler (CVE-2015-7450)

Summary Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of data with Java InvokerTransformer class. By sending specially crafted data, an attacker could exploit this vulnerability to execute arbitrary Java code on the...

Security Bulletin: Vulnerability in GSKit affect IBM SPSS Modeler (CVE-2015-1788)

Summary GSKit is an internal component used by IBM SPSS Modeler. The GSKit contains a security vulnerability which may cause infinite loop. The issue is identified by the specified CVE below. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of service,...