CVE-2010-4274
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.
- CVSS 2.0
- 4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.30% probability · 23th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/director agent
- Source
- cve@mitre.org
EPSS 0.3% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://secunia.com/advisories/42239Vendor Advisory
- http://securitytracker.com/id?1024736
- http://www-01.ibm.com/support/docview.wss?uid=isg1IC71821
- http://www.securityfocus.com/bid/44839
- http://www.vupen.com/english/advisories/2010/2978Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63238
- http://secunia.com/advisories/42239Vendor Advisory
- http://securitytracker.com/id?1024736
- http://www-01.ibm.com/support/docview.wss?uid=isg1IC71821
- http://www.securityfocus.com/bid/44839
- http://www.vupen.com/english/advisories/2010/2978Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63238
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.