CVE-2015-1901: Infoleak
Published Jun 28, 2015
·Updated
The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.
Affected Software
12 affected components
IBM InfoSphere Information Server=8.5
IBM InfoSphere Information Server=8.5.0.1
IBM InfoSphere Information Server=8.5.0.2
IBM InfoSphere Information Server=8.5.0.3
IBM InfoSphere Information Server=8.7
IBM InfoSphere Information Server=8.7.0.1
IBM InfoSphere Information Server=8.7.0.2
IBM InfoSphere Information Server=9.1
IBM InfoSphere Information Server=9.1.0.1
IBM InfoSphere Information Server=9.1.2
IBM InfoSphere Information Server=11.3
IBM InfoSphere Information Server=11.3.1
Remediation
Patch Available
Event History
Jun 28, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1901?
CVE-2015-1901 has a medium severity level due to its potential to expose sensitive information to local users.
2
How do I fix CVE-2015-1901?
To fix CVE-2015-1901, upgrade IBM InfoSphere Information Server to version 11.3.1.2 or later.
3
Which versions of IBM InfoSphere Information Server are affected by CVE-2015-1901?
CVE-2015-1901 affects IBM InfoSphere Information Server versions 8.5 through 11.3 before 11.3.1.2.
4
Can CVE-2015-1901 be exploited remotely?
No, CVE-2015-1901 can only be exploited by local users.
5
What type of information can be exposed due to CVE-2015-1901?
CVE-2015-1901 may allow local users to obtain sensitive information through unspecified commands.