7.2

CVE-2015-4927

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file.

Data is provided by the National Vulnerability Database (NVD)
IbmTivoli Storage Manager Version6.3.3
IbmTivoli Storage Manager Version6.3.4
IbmTivoli Storage Manager Version6.3.5
IbmTivoli Storage Manager Version6.3.5.1
IbmTivoli Storage Manager Version7.1
IbmTivoli Storage Manager Version7.1.1
IbmTivoli Storage Manager Version7.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.301
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C