Security Bulletin: Infosphere BigInsights is affected by a vulnerability in DB2 (CVE-2015-1947).

Summary Infosphere BigInsights is affected by a local escalation of privilege vulnerability in DB2 CVE-2015-1947. The vulnerability exists in the Big SQL server component included in BigInsights. Vulnerability Details CVEID: CVE-2015-1947 DESCRIPTION: IBM DB2 is vulnerable to a privilege escalati...

Security Bulletin: DB2 local escalation of privilege vulnerability affects IBM Tivoli Storage Manager Server (CVE-2015-1947)

Summary IBM Tivoli Storage Manager IBM Spectrum Protect Server is affected by an IBM DB2 software vulnerability that can result in a local user gaining root level access to which the user is not entitled. Vulnerability Details CVEID: CVE-2015-1947 DESCRIPTION: IBM DB2 software is vulnerable to a...

CVE-2015-1947

CVE-2015-1947 affects IBM InfoSphere BigInsights (versions 3.0, 3.0.0.1, 3.0.0.2, and 4.0) when DB2 is used. The root cause is an untrusted search path that lets a local user place a malicious library loaded by a setuid/setgid binary, enabling privilege escalation to root. IBM documents this as a...