CVE-2015-7818

Currently unrated

Key Information:

Vendor
IBM
Status
System Networking Switch Center
Vendor
CVE Published:
12 November 2015

Summary

The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.

References

http://www.zerodayinitiative.com/advisories/ZDI-15-551/
x_refsource_MISC
https://support.lenovo.com/us/en/product_security/len_201...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.