CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

Design/Logic Flaw

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867

IBM InfoSphere Streams (versions 4.0.1.1 and earlier; 4.1.1.0 and earlier) are affected by CVE-2016-2867 due to improper handling of the runAsUser feature, which can cause operator code to check permissions against the root group, enabling local privilege elevation. The IBM Security Bulletin conf...

CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

CVE-2016-2867: Undefined Security Weakness

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors...

PT-2016-5253

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Streams versions prior to 4.0.1.2 IBM Streams versions prior to 4.1.1.1 Description The issue is related to the improper implementation of the runAsUser feature, which allows local users to obtain root group privileges...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

IBM InfoSphere Streams Privilege Acquisition Vulnerability

IBM InfoSphere Streams is a data analytics platform. A security vulnerability in IBM InfoSphere Streams exists when the program sets the instance runAsUser attribute, which allows a local attacker to exploit the vulnerability to check permissions using the group ID of the root user...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2016-03220)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which can be exploited by a local attacker to execute arbitrary commands during installation, exposing...

IBM InfoSphere Master Data Management Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative Edition. A remote attacker could exploit this...

Unspecified Vulnerability in IBM InfoSphere Master Data Management Collaborative Edition

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM Collaborative Edition. An attacker could exploit the vulnerability to disclose...

InfoSphere Information Server Access Bypass

The vulnerability of the InfoSphere Information Server software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by modifying the cookie file...

IBM InfoSphere Information Server Security Bypass Vulnerability (CNVD-2016-01478)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server. A remote attacker could exploit the...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

Design/Logic Flaw

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

CVE-2015-7490

CVE-2015-7490 affects IBM InfoSphere Information Server: versions 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5. An attacker with a valid login could modify the user cookie to bypass access restrictions and access information intended for another user. IBM...

CVE-2015-7490

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

PT-2016-1413

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 through FP3 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0 IBM InfoSphere Information Server versions 11.3 through 11.3.1...

CVE-2015-7490: Improper Access Control

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...