VULNERABILITY INTELLIGENCE
CVE-2015-4927
CVSS score7.2 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2015-11-04
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file.
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108