CVE-2015-1947

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 3.0 through 3.0.0.2 IBM InfoSphere BigInsights version 4.0

Description The issue allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program when a DB2 database is used.

Recommendations For IBM InfoSphere BigInsights versions 3.0 through 3.0.0.2, update to a version that is not affected by this issue. For IBM InfoSphere BigInsights version 4.0, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to setuid or setgid programs to minimize the risk of exploitation.