PT-2015-7628
CVE-2015-7818
·
تاريخ النشر
2015-11-10
·
تاريخ التحديث
2015-11-12
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM System Networking Switch Center versions prior to 7.3.1.5
Lenovo Switch Center versions prior to 8.1.2.0
Description
The issue allows local users to execute arbitrary JSP code with SYSTEM privileges. This is achieved by using the Apache Axis AdminService deployment method to install a .jsp file.
Recommendations
For IBM System Networking Switch Center versions prior to 7.3.1.5, update to version 7.3.1.5 or later.
For Lenovo Switch Center versions prior to 8.1.2.0, update to version 8.1.2.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾