CVE Vulnerabilities

CVE-2017-4982

Improper Privilege Management

Published: May 08, 2017 | Modified: Oct 03, 2019
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Mainframe_enablers_resourcepak_base Emc 7.6.0 (including) 7.6.0 (including)
Mainframe_enablers_resourcepak_base Emc 8.0.0 (including) 8.0.0 (including)
Mainframe_enablers_resourcepak_base Emc 8.1.0 (including) 8.1.0 (including)

Potential Mitigations

References