VulnerabilityModified
CVE-2015-1901
The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.
LOW 1.9EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands.
- CVSS 2.0
- 1.9 LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/infosphere information server
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR52549Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21701436Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75162
- http://www.securitytracker.com/id/1032633
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR52549Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21701436Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75162
- http://www.securitytracker.com/id/1032633
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.