IBM InfoSphere Information Server Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	48516
Class:	Design Error
CVE:	CVE-2011-3123 CVE-2011-3124
Remote:	No
Local:	Yes
Published:	Jul 01 2011 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	The vendor reported this issue.
Vulnerable:	IBM InfoSphere Information Server 8.5.0.1 IBM InfoSphere Information Server 8.5
Not Vulnerable:

IBM InfoSphere Information Server Multiple Local Privilege Escalation Vulnerabilities

The IBM InfoSphere Information Server is prone to multiple local privilege-escalation vulnerabilities.

An attacker can exploit these issues to gain root access, perform unauthorized actions, or gain access to sensitive information.

IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 are vulnerable.

IBM InfoSphere Information Server Multiple Local Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM InfoSphere Information Server Multiple Local Privilege Escalation Vulnerabilities

Solution:
Vendor updates are available. Please see the references for details.

IBM InfoSphere Information Server Multiple Local Privilege Escalation Vulnerabilities

References:

• A privilege escalation vulnerability on the Engine tier (8.5 & 8.5 Fix Pack 1) c (IBM)
  
• Download fix for Security Vulnerability: privilege escalation, APAR JR39769 (IBM)