CVE-2016-2867

7.0 highEPSS 0.3%

High (7.0) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2016-07-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:infosphere_streams
ibm:streams

References

http://www-01.ibm.com/support/docview.wss?uid=swg21983444
http://www-01.ibm.com/support/docview.wss?uid=swg21983444

Check your stack JSON