IBM InfoSphere Information Server CVE-2017-1469 Local Privilege Escalation Vulnerability

Bugtraq ID:	100309
Class:	Unknown
CVE:	CVE-2017-1469
Remote:	No
Local:	Yes
Published:	Aug 10 2017 12:00AM
Updated:	Aug 10 2017 12:00AM
Credit:	Goh Zhi Hao, Mohammad Shah Bin Mohammad Esa, Samandeep Singh (Office Singapore) of SEC Consult Vulnerability Lab.
Vulnerable:	IBM InfoSphere Information Server on Cloud 11.5 IBM InfoSphere Information Server 9.1 IBM InfoSphere Information Server 11.5 IBM InfoSphere Information Server 11.3
Not Vulnerable:

IBM InfoSphere Information Server CVE-2017-1469 Local Privilege Escalation Vulnerability

IBM InfoSphere Information Server is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to gain escalated privileges and perform unauthorized actions.

IBM InfoSphere Information Server CVE-2017-1469 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM InfoSphere Information Server CVE-2017-1469 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Information Server CVE-2017-1469 Local Privilege Escalation Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22006069:IBM InfoSphere Information Server is vulnerable to a privilege escal (IBM)