CVEvulnerability

CVE-2015-1947

7.4 HIGH Published 2015-12-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-12-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program.

Affected configurations

• ibm infosphere biginsights 3.0.0.0 • ibm infosphere biginsights 3.0.0.1 • ibm infosphere biginsights 3.0.0.2 • ibm infosphere biginsights 4.0.0.0

References