Race Condition Vulnerability in IBM System Networking Switch and Lenovo Switch Center
CVE-2015-7817

Currently unrated

Key Information:

Vendor

IBM
Status
System Networking Switch Center
Vendor
CVE Published:
12 November 2015

What is CVE-2015-7817?

A race condition exists in the administration-panel web service of IBM System Networking Switch Center and Lenovo Switch Center, which can be exploited by remote attackers to gain unauthorized privileged account access. By sending specially crafted requests to specific ports, attackers can introduce directory traversal sequences via the FileReader.jsp input, enabling the reading of arbitrary text files. This vulnerability highlights the need for robust security practices in managing network devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.zerodayinitiative.com/advisories/ZDI-15-553/
x_refsource_MISC
https://support.lenovo.com/us/en/product_security/len_201...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.