CVE-2014-3038

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by…

published June 8, 2014

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Published
2014-06-08T23:00Z
EPSS history
Timeline
  • 08 JUN 23:00Z
    IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by…
    cvelistv5