CVE-2015-1947 Privilege escalation in n/a

What is CVE-2015-1947?

CVE-2015-1947 is a high-severity vulnerability in n/a, published on 31 Dec 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program.

Which versions are affected by CVE-2015-1947?

It affects 1 product.

Products include Ibm Infosphere Biginsights.

How do I fix CVE-2015-1947?

No fix has been published for CVE-2015-1947 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-1947 being exploited?

There is no known exploitation of CVE-2015-1947 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Exploited Medium 6.5
• CVE-2014-4782 Information disclosure in n/a Medium 6.5
• CVE-2015-1889 Missing authorization in n/a Medium 6.5
• CVE-2013-3992 Cross-site request forgery in n/a Medium 6.0
• CVE-2017-1552 Cross-site scripting in BigInsights Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-v5fc-jhcf-9h9r.