CVE-2015-5020 — IBM Infosphere Biginsights vulnerability

CWE-2643 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 69.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Biginsights
Timeline
PublishedJan 2
Latest updateMay 17

Description

The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary tables via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶NVDibm/infosphere_biginsights4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-3r4c-46mm-g7p8: The Big SQL component in IBM InfoSphere BigInsights 3↗2022-05-17
▶
CVEList
CVE-2015-5020: The Big SQL component in IBM InfoSphere BigInsights 3↗2016-01-02
▶
CVE-2015-5020 — IBM vulnerability | cvebase