CVE-2015-4991 Information disclosure in n/a

Medium 4.0 Published 15 Feb 2016 Updated 6 Aug 2024

Local attackers can read sensitive information from memory dumps in IBM SPSS Modeler due to cleartext data exposure.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-4991?

CVE-2015-4991 is a medium-severity vulnerability in n/a, published on 15 Feb 2016. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file.

Weakness: CWE-200

Which versions are affected by CVE-2015-4991?

It affects 1 product.

Products include Ibm Spss Modeler.

How do I fix CVE-2015-4991?

No fix has been published for CVE-2015-4991 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-4991 being exploited?

There is no known exploitation of CVE-2015-4991 in the wild and no public exploit code.

Sources

Also known as GHSA-jjx3-j8c6-322v.