What is the severity of CVE-2015-1900?

CVE-2015-1900 has a high severity level due to its ability to allow local users to obtain root privileges.

How do I fix CVE-2015-1900?

To fix CVE-2015-1900, apply the latest patches and updates from IBM for affected versions of InfoSphere DataStage.

What versions of IBM InfoSphere DataStage are affected by CVE-2015-1900?

CVE-2015-1900 affects IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1, 11.3, and 11.3.1.2 on UNIX.

Can CVE-2015-1900 be exploited remotely?

CVE-2015-1900 cannot be exploited remotely as it requires local access to the system.

What kind of attack does CVE-2015-1900 enable?

CVE-2015-1900 enables local users to write to executable files, potentially leading to privilege escalation.

Vulnerability/
CVE-2015-1900

high

7.2

CWE

264

29/6/2015

4/8/2016

CVE-2015-1900

First published: Mon Jun 29 2015(Updated: )

IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and consequently obtain root privileges, via unspecified vectors.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM DataStage	=8.1
IBM DataStage	=8.5
IBM DataStage	=8.7
IBM DataStage	=9.1
IBM DataStage	=11.3
IBM DataStage	=11.3.1
IBM DataStage	=11.3.1.2
Linux kernel

Remedy

http://www-01.ibm.com/support/docview.wss?uid=swg21902280

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-1900?
CVE-2015-1900 has a high severity level due to its ability to allow local users to obtain root privileges.
How do I fix CVE-2015-1900?
To fix CVE-2015-1900, apply the latest patches and updates from IBM for affected versions of InfoSphere DataStage.
What versions of IBM InfoSphere DataStage are affected by CVE-2015-1900?
CVE-2015-1900 affects IBM InfoSphere DataStage versions 8.1, 8.5, 8.7, 9.1, 11.3, and 11.3.1.2 on UNIX.
Can CVE-2015-1900 be exploited remotely?
CVE-2015-1900 cannot be exploited remotely as it requires local access to the system.
What kind of attack does CVE-2015-1900 enable?
CVE-2015-1900 enables local users to write to executable files, potentially leading to privilege escalation.

agent/type
agent/last-modified-date
agent/first-publish-date
agent/references
agent/remedy
agent/weakness
agent/severity
agent/author
agent/tags
agent/softwarecombine
agent/description
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
vendor/ibm
canonical/ibm datastage
version/ibm datastage/8.1
version/ibm datastage/8.5
version/ibm datastage/8.7
version/ibm datastage/9.1
version/ibm datastage/11.3
version/ibm datastage/11.3.1
version/ibm datastage/11.3.1.2
vendor/linux
canonical/linux kernel

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.