CVE-2015-4952 - OpenCVE

The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:M/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Ibm	Endpoint Manager For Remote Control

Configuration 1 [-]

OR	cpe:2.3:a:ibm:endpoint_manager_for_remote_control:9.0.1:::::::*
	cpe:2.3:a:ibm:endpoint_manager_for_remote_control:9.1.0:::::::*

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21962602	Broken Link

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ibm

Published: 2018-03-29T18:00:00

Updated: 2018-03-29T17:57:01

Reserved: 2015-06-24T00:00:00

Link: CVE-2015-4952

JSON object: View

NVD Information

Status : Analyzed

Published: 2018-03-29T18:29:01.107

Modified: 2018-04-23T20:38:04.043

Link: CVE-2015-4952

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:endpoint_manager_for_remote_control:9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "64B4383F-F25A-40E7-A3E2-C79D94F13957", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:endpoint_manager_for_remote_control:9.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "D3884321-1225-4B87-B123-F16FA78F1A03", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196."}, {"lang": "es", "value": "El plugin on-demand en IBM Endpoint Manager for Remote Control 9.0.1 y 9.1.0 permite que atacantes remotos ayudados por el usuario ejecuten c\u00f3digo arbitrario mediante vectores sin especificar. IBM X-Force ID: 105196."}], "id": "CVE-2015-4952", "lastModified": "2018-04-23T20:38:04.043", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-03-29T18:29:01.107", "references": [{"source": "psirt@us.ibm.com", "tags": ["Broken Link"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962602"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}