CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Access Control
Summary: the client implementation in ibm informix dynamic server 11.70.xcn on windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a trojan horse file.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-03-28
Last Modified Date: 2016-12-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Access Control.
user
CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Access Control
Summary: the client implementation in ibm informix dynamic server 11.70.xcn on windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a trojan horse file.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-03-28
Last Modified Date: 2016-12-03
assistant