CVE-2015-7490

Опубликовано: 03 мар. 2016

Источник: nvd

CVSS3: 3.1

CVSS2: 3.5

EPSS Низкий

Описание

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1JR54787
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21975827
Vendor Advisory
http://www.securitytracker.com/id/1035125
http://www-01.ibm.com/support/docview.wss?uid=swg1JR54787
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21975827
Vendor Advisory
http://www.securitytracker.com/id/1035125

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:9.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:9.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00128

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-xg6w-w34w-wcwm

CVSS3: 3.1

github

больше 3 лет назад

BDU:2016-00714

fstec

почти 10 лет назад

Уязвимость программной платформы InfoSphere Information Server, позволяющая нарушителю обойти существующие ограничения доступа