CVEvulnerability
CVE-2015-7818
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.
Affected configurations
• ibm system networking switch center (<= 7.3.1.4)
• lenovo switch center (<= 8.1.1.0)
Related
Weakness · not in database (1)
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-551/ www.zerodayinitiative.com
- https://support.lenovo.com/us/en/product_security/len_2015_074 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-15-551/ www.zerodayinitiative.com
- https://support.lenovo.com/us/en/product_security/len_2015_074 Vendor Advisory