NVD

Id
28260  
Name
CVE-2015-7818  
Description
The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-11-11  
Modified Date
2015-11-12  
Seq
2015-7818  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148564 28260 CVE-2015-7818 http://www.zerodayinitiative.com/advisories/ZDI-15-551/  View
148565 28260 CVE-2015-7818 https://support.lenovo.com/us/en/product_security/len_2015_074  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10599 JVNDB-2015-005919 IBM System Networking Switch Center および Lenovo Switch Center における SYSTEM 権限で任意の JSP コードを実行される脆弱性 IBM System Networking Switch Center (SNSC) および Lenovo Switch Center の管理パネルの Web サービスには、SYSTEM 権限で任意の JSP コードを実行される脆弱性が存在します。 CVE-2015-7818 85043 CVE-2015-7818 28260 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005919.html 2015-11-10 2015-11-16 View