CVE-2016-2867

Published: Jul 2, 2016Modified: May 6, 2026

7.0

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors.

Affected (2)

Products: Ibm: Infosphere Streams, Streams

Ibm

2 products

Infosphere Streams

Streams

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Streams	Up to 4.0.1.1
Ibm Streams	Up to 4.1.1.0

Related CWEs

CWE-254

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21983444

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21983444

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.