Design/Logic Flaw

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CVE-2015-5005 affects IBM PowerHA SystemMirror CSPOC on AIX 6.1 and 7.1. An authenticated remote user added to the cluster password-change list can exploit a shipped script to perform a privileged action, gaining root via an "su root" operation. The vulnerability is tied to the CSPOC feature that...