CVE-2015-1900: High severity IBM InfoSphere DataStage vulnerability
Published Jun 29, 2015
·Updated
IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors.
Affected Software
8 affected components
IBM InfoSphere DataStage=8.1
IBM InfoSphere DataStage=8.5
IBM InfoSphere DataStage=8.7
IBM InfoSphere DataStage=9.1
IBM InfoSphere DataStage=11.3
IBM InfoSphere DataStage=11.3.1
IBM InfoSphere DataStage=11.3.1.2
Linux Linux kernel
Remediation
Patch Available
Event History
Jun 29, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1900?
CVE-2015-1900 has a high severity level due to its ability to allow local users to obtain root privileges.
2
How do I fix CVE-2015-1900?
To fix CVE-2015-1900, apply the latest patches and updates from IBM for affected versions of InfoSphere DataStage.
3
What versions of IBM InfoSphere DataStage are affected by CVE-2015-1900?
CVE-2015-1900 affects IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1, 11.3, and 11.3.1.2 on UNIX.
4
Can CVE-2015-1900 be exploited remotely?
CVE-2015-1900 cannot be exploited remotely as it requires local access to the system.
5
What kind of attack does CVE-2015-1900 enable?
CVE-2015-1900 enables local users to write to executable files, potentially leading to privilege escalation.