3721 matches found
CVE-2012-5938
The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations...
Design/Logic Flaw
The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations...
CVE-2012-5938
The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations...
CVE-2012-5938
The issue (CVE-2012-5938) affects IBM InfoSphere Information Server versions 8.1, 8.5, 8.7 and 9.1 on UNIX/Linux. During installation, files are created with insufficient permissions/ownership, allowing local users to bypass access restrictions via standard filesystem operations. The IBM Security...
CVE-2012-5938: Undefined Security Weakness
The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations...
PT-2013-1851
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 9.1 Description The issue allows local users to bypass intended access restrictions due to incorrect permissions and ownerships set during the installation process on UNIX and Linux system...
CVE-2013-0490
Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors...
Code injection
Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors...
CVE-2013-0490
CVE-2013-0490 is an IBM vulnerability with an unspecified local-privilege escalation affecting multiple IBM products. Confirmed affected components in the connected data include IBM TXSeries for Multiplatforms (CICS/7.1 on AIX) and IBM InfoSphere Guardium S-TAP for DB2 on z/OS (v8.1). Core issue ...
CVE-2013-0490
Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors...
PT-2013-2382
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium S-TAP version 8.1 for DB2 on z/OS Description The issue allows local users to gain privileges, although the specific vectors used for exploitation are not detailed. Recommendations For IBM InfoSphere Guardium S-TAP...
CVE-2013-0490: Undefined Security Weakness
Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors...
CVE-2013-0477
Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and...
CVE-2013-0478
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HT...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HT...
CVE-2013-0477
Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and...
CVE-2013-0478
Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HT...
CVE-2013-0477
CVE-2013-0477 describes multiple XSS vulnerabilities in IBM InfoSphere Master Data Management – Collaborative Edition (versions 10.0 and 10.1 before FP1) and InfoSphere MDM Server for Product Information Management (PIM) (versions 6.0, 9.0, 9.1). The root cause is unspecified in the provided docu...
CVE-2013-0478
The CVE-2013-0478 entry describes an XSS vulnerability in IBM InfoSphere Master Data Management – Collaborative Edition (versions 10.0 and 10.1 before FP1) and InfoSphere Master Data Management Server for Product Information Management (versions 6.0, 9.0, 9.1). The flaw allows remote authenticate...