Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Infosphere Biginsights
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-1947 1 Ibm 1 Infosphere Biginsights 2018-10-09 6.9 MEDIUM 7.4 HIGH
Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program.
CVE-2015-1772 2 Apache, Ibm 2 Hive, Infosphere Biginsights 2017-03-24 4.3 MEDIUM 7.3 HIGH
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authentication via a crafted LDAP request.
CVE-2015-1836 2 Apache, Ibm 2 Hbase, Infosphere Biginsights 2017-03-24 7.5 HIGH 7.3 HIGH
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.