CVE-2017-4982 Privilege escalation in EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0

Critical 9.8 Published Updated

A privilege management vulnerability in EMC Mainframe Enablers allows malicious users to compromise the affected system.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2017-4982?

CVE-2017-4982 is a critical vulnerability in EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0, published on 8 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Weakness: CWE-269

Which versions are affected by CVE-2017-4982?

It affects 1 product.

Products include Emc Mainframe Enablers Resourcepak Base.

How do I fix CVE-2017-4982?

No fix has been published for CVE-2017-4982 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-4982 being exploited?

There is no known exploitation of CVE-2017-4982 in the wild and no public exploit code.

Sources

Also known as GHSA-f235-5f65-669j.

Is CVE-2017-4982 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free