Security Bulletin: A vulnerability in the instance runAsUser function was found in IBM InfoSphere Streams (CVE-2016-2867)

Summary There is a potential vulnerability in IBM InfoSphere Streams when the instance runAsUser property is set. IBM InfoSphere Streams has addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-2867 DESCRIPTION: In certain supported configurations of IBM InfoSphere Streams, setting...

CVE-2016-2867

IBM InfoSphere Streams (versions 4.0.1.1 and earlier; 4.1.1.0 and earlier) are affected by CVE-2016-2867 due to improper handling of the runAsUser feature, which can cause operator code to check permissions against the root group, enabling local privilege elevation. The IBM Security Bulletin conf...