CVE-2014-3038

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

Design/Logic Flaw

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

CVE-2014-3038

CVE-2014-3038 affects IBM SPSS Modeler 16 on UNIX. The vulnerability arises when a spawned process retains root GID and privileged groups after authentication, allowing a local attacker to access files normally restricted to privileged users by leveraging (1) gid 0 or (2) root’s group memberships...

CVE-2014-3038

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

CVE-2014-3038: Undefined Security Weakness

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

PT-2014-5037

Name of the Vulnerable Software and Affected Versions IBM SPSS Modeler version 16.0 Description The issue allows local users to bypass intended file-access restrictions by leveraging group memberships, specifically gid 0 or root's group memberships, due to improper handling of group privileges...

Oracle Linux 5 : Important: / tomcat (ELSA-2007-0327)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0327 advisory. jakarta-commons-modeler-1.1-8jpp.1.0.2.el5 1.1-8jpp.1.0.2.el5 - rebuild after the fix for bug 238139 made it into the build root - Resolves: bug 238694...

CVE-2012-5769

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity...

CVE-2012-5769

IBM SPSS Modeler versions affected: 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2. The root cause is an XML External Entity (XXE) vulnerability in XML processing that could cause sensitive data exposure (reading local/remote files) and potentially trigger requests to intranet servers or a den...

CVE-2012-5769

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity...

PT-2013-1843

Name of the Vulnerable Software and Affected Versions IBM SPSS Modeler versions 14.0 through 14.2 FP3 IBM SPSS Modeler version 15.0 before FP2 Description The issue allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service du...

CVE-2012-5769: Undefined Security Weakness

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity...

SAP NetWeaver Workflow Modeler - Multiple XSS

Application: SAP NetWeaver Workflow Modeler Versions Affected: SAP NetWeaver NW2004s SP6 Workflow Modeler Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author:...

Out-of-bounds

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...

CVE-2008-0402

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...

CVE-2008-0402

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...

CVE-2008-0402

CVE-2008-0402 affects IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 prior to Interim Fix 11. It describes an unspecified vulnerability that lets remote authenticated users bypass access restrictions and delete unspecified repository resources via unknown vectors, even when not adminis...

CVE-2008-0402: Undefined Security Weakness

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...

CVE-2007-5435

Unspecified vulnerability in CA ERwin Process Modeler formerly AllFusion Process Modeler 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File Datatype Standards File...

CVE-2007-5435

Unspecified vulnerability in CA ERwin Process Modeler formerly AllFusion Process Modeler 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File Datatype Standards File...