CVE-2015-0169

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21699470	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21699470	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_siteprotector_system:3.0:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.1:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.2:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.3:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.4:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.5:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.6:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.0:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.1:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.2:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.3:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.1.0:::::::*
	cpe:2.3:a:ibm:security_siteprotector_system:3.1.1.1:::::::*

History

21 Nov 2024, 02:22

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21699470 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21699470 - Vendor Advisory

Information

Published : 2015-05-25 14:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-0169

Mitre link : CVE-2015-0169

CVE.ORG link : CVE-2015-0169

JSON object : View

Products Affected

ibm

security_siteprotector_system

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

{"id": "CVE-2015-0169", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-05-25T14:59:13.340", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21699470", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21699470", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors."}, {"lang": "es", "value": "IBM Security SiteProtector System 3.0 anterior a 3.0.0.7, 3.1 anterior a 3.1.0.4, y 3.1.1 anterior a 3.1.1.2 permite a usuarios remotos autenticados inyectar argumentos a trav\u00e9s de vectores no especificados."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0811434-A0CD-4C68-9988-42138C07EF4D"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC15A710-0F50-4B96-8A41-8191F3C13FAF"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6F28CD6-F183-46FA-A1F6-DCE3F1676A5C"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C4F4CBC-CD3E-499E-9BC1-5630BF7FCE38"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B32B8B2-CA0E-48F6-9E98-26A8C98FD201"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9E414BA-E27E-4FC9-A9D0-8A4B55FA400B"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD31932A-0684-43B5-8154-5656E9CEE0F5"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79A76A4F-1D7D-45B1-8EB3-B1F9E587F9A3"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CE1170B-4D43-45BE-81B4-2E581AF6CA30"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "401ADE14-44D9-4289-9DE2-1F3878293CFC"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA67BB3D-A3CE-4804-86CA-0D46CA79900C"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2007611-D3CD-4999-BCD1-9629C33F9C4D"}, {"criteria": "cpe:2.3:a:ibm:security_siteprotector_system:3.1.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01C1444A-A8D5-4070-89E0-95E07FBC61F8"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}