CVE-2016-2867 IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors.
HighCVSS 7.0
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm infosphere streams | <= 4.0.1.1 | No fix listed |
| ibm streams | <= 4.1.1.0 | No fix listed |
References
- www-01.ibm.com patch vendor-advisory