Design/Logic Flaw

The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2012-4819

This CVE (CVE-2012-4819) is an XSS vulnerability in IBM InfoSphere Information Server web interfaces (InfoSphere Business Glossary, DataStage Operation Console, Administration, Reporting and Repository Management Web Console) affecting InfoSphere Information Server versions 8.1, 8.5 (before FP3) ...

CVE-2012-0701

The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2012-0701

CVE-2012-0701 : The IBM InfoSphere DataStage client in Information Server 8.1, 8.5 (before FP3), and 8.7 relies on client-side access control, enabling remote authenticated users to escalate privileges via unspecified vectors. Remediation (per IBM Security Bulletin): for 8.1, install Fix Pack 2 a...

Buffer overflow

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

Information disclosure

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1 and other products) is vulnerable to local privilege escalation caused by weak permissions on unspecified files. The description indicates that local users can gain privileges via unkn...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

Buffer overflow

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...

CVE-2009-4240

CVE-2009-4240 affects IBM InfoSphere Information Server 8.1 before FP1, specifically the DataStage subsystem. The vulnerability consists of multiple buffer overflows in unspecified setuid executables, with unknown impact and attack vectors as described in the CVE entry. The NVD metrics assign a b...