CVE-2015-1992

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

IBM Systems Director 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0, and 6.3.6.0 improperly processes events, which allows local users to gain privileges via unspecified vectors.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=nas7d9a0db411a9071e986257e8c0029b365Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT08185Broken Link
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098524Vendor Advisory
http://www.securitytracker.com/id/1033653Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=nas7d9a0db411a9071e986257e8c0029b365Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT08185Broken Link
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098524Vendor Advisory
http://www.securitytracker.com/id/1033653Third Party Advisory, VDB Entry

Timeline

Published: Aug 23, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-19935.0IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, CVE-2015-19945.0IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not include the HTTPOnly flag in a Set-Cookie header for the session CVE-2015-19954.3Multiple cross-site scripting (XSS) vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allow remote attack CVE-2015-19962.1IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proxi CVE-2015-19976.8Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 allows remote attack CVE-2015-19995.0IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain CVE-2015-20009.8The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable cla CVE-2015-200017.5In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the compar CVE-2015-20019.8The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable CVE-2015-200195.4The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could CVE-2015-20029.8The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a CVE-2015-20039.8The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method