Vulnerability Details CVE-2015-7490
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.9%
CVSS Severity
CVSS v3 Score 3.1
CVSS v2 Score 3.5
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR54787
- http://www-01.ibm.com/support/docview.wss?uid=swg21975827
- http://www.securitytracker.com/id/1035125
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR54787
- http://www-01.ibm.com/support/docview.wss?uid=swg21975827
- http://www.securitytracker.com/id/1035125
Products affected by CVE-2015-7490
-
cpe:2.3:a:ibm:infosphere_information_server:11.3
-
cpe:2.3:a:ibm:infosphere_information_server:11.3.1
-
cpe:2.3:a:ibm:infosphere_information_server:11.5
-
cpe:2.3:a:ibm:infosphere_information_server:8.5
-
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1
-
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2
-
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3
-
cpe:2.3:a:ibm:infosphere_information_server:8.7
-
cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1
-
cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2
-
cpe:2.3:a:ibm:infosphere_information_server:9.1
-
cpe:2.3:a:ibm:infosphere_information_server:9.1.0.1
-
cpe:2.3:a:ibm:infosphere_information_server:9.1.2