CVE-2015-5043

diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspecified key sequences.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21968616	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_guardium:8.2:::::::*
	cpe:2.3:a:ibm:security_guardium:9.0:::::::*
	cpe:2.3:a:ibm:security_guardium:9.1:::::::*
	cpe:2.3:a:ibm:security_guardium:9.5:::::::*
	cpe:2.3:a:ibm:security_guardium:10.0:::::::*

History

No history.

Information

Published : 2015-11-08 22:59

Updated : 2023-12-10 11:46

NVD link : CVE-2015-5043

Mitre link : CVE-2015-5043

CVE.ORG link : CVE-2015-5043

JSON object : View

Products Affected

ibm

security_guardium

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-5043", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-11-08T22:59:17.563", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21968616", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspecified key sequences."}, {"lang": "es", "value": "diag en IBM Security Guardium 8.2 en versiones anteriores a p6015, 9.0 en versiones anteriores a p6015, 9.1, 9.5 y 10.0 en versiones anteriores a p6015 permiten a usuarios locales obtener acceso root a trav\u00e9s de una secuencia de teclas no especificada."}], "lastModified": "2015-11-09T20:12:03.703", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_guardium:8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57130C1B-80A6-4A33-8AD3-5C6F4669F3E7"}, {"criteria": "cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64C62744-22BD-4038-8257-822ADDAC370D"}, {"criteria": "cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26EA5CC2-F4BE-4F22-AC85-1956EFA88B66"}, {"criteria": "cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37342DD2-055B-429C-9231-2D9FE70B5AE5"}, {"criteria": "cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "552A0A69-388F-4842-A882-78F267D4BF09"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}