Security Bulletin: Information Server Connector Migration Tool allows a user with limited role to create/modify/replace some jobs (CVE-2015-0180)

Summary A user with limited role may be able to create/modify/delete specific types of jobs. Vulnerability Details CVEID: CVE-2015-0180 DESCRIPTION: IBM Information Server Connector Migration Tool could allow a user with limited role to create/modify/delete specific types of jobs that they do not...

CVE-2015-0180

The IBM InfoSphere Information Server Connector Migration Tool (affecting 8.1–11.3) allows a user with a limited role to create/modify/delete certain jobs they should not access. The root cause is a rights/permission validation flaw within the Connector Migration Tool that bypasses intended restr...