CVEvulnerability
CVE-2015-7913
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.
Affected configurations
• tibbo aggregate (<= 5.21.02)
References
- http://zerodayinitiative.com/advisories/ZDI-15-572/ zerodayinitiative.com
- https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01 Patch, US Government Resource
- http://zerodayinitiative.com/advisories/ZDI-15-572/ zerodayinitiative.com
- https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01 Patch, US Government Resource