Vulnerability CVE-2015-1946 - CERT Civis.Net

Vulnerability Name:

CVE-2015-1946 (CCN-103201)

Assigned:

2015-06-30

Published:

2015-06-30

Updated:

2016-11-28

Summary:

IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.

CVSS v3 Severity:

4.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

4.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.1 Medium (CCN CVSS v2 Vector: AV:L/AC:M/Au:S/C:P/I:P/A:P)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2015-1946

Source: AIXAPAR
Type: UNKNOWN
PI35180

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21959083

Source: CCN
Type: IBM Security Bulletin 1959083
Multiple Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.6

Source: CCN
Type: IBM Security Bulletin 1969077
A security vulnerability in IBM WebSphere Application Server affects IBM Security Access Manager for Web version 7.0 software installations and IBM Tivoli Access Manager for e-business (CVE-2015-1946)

Source: BID
Type: UNKNOWN
75496

Source: CCN
Type: BID-75496
Multiple IBM Products CVE-2015-1946 Local Privilege Escalation Vulnerability

Source: XF
Type: UNKNOWN
ibm-websphere-cve20151946-priv-escalation(103201)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5.5:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:ibm:websphere_virtual_enterprise:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*

AND

cpe:/o:ibm:security_access_manager:6.0:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:6.1:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:6.1.1:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:7.0:*:web:*:*:*:*:*

Denotes that component is vulnerable