CVE-2017-1468

High

Published: 02/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories.

Risk Assessment

The risk is that a local user could gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to restrict access to installation directories and to monitor and audit local user activities.

Other vulnerabilities in IBM InfoSphere Information Server 9.1, 11.3, 11.5

CVE-2017-1383Critical
IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Original NVD description (English source)

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.