CVE-2015-5005

Published: Nov 8, 2015Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list.

Affected (1)

Products: Ibm: Powerha System Mirror

Ibm

1 product

Powerha System Mirror

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Powerha System Mirror	All versions

Running on/with	Platform Versions
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1

Related CWEs

CWE-264

References (10)

http://aix.software.ibm.com/aix/efixes/security/powerha_advisory.asc

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IV76943

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=isg1IV76946

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=isg1IV77007

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/76948

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/powerha_advisory.asc