|CVSS SCORE||7.2, (AV:L/AC:L/Au:N/C:C/I:C/A:C)|
System Networking Switch Center
The specific flaw exists within the IBM SNSC Web Service, which listens by default on ports 40080 (HTTP) or 40443 (HTTPS) for requests to the administration panel. Because this service offers access to the Apache Axis AdminService, an unprivileged local attacker can publish arbitrary classes with the deployment method. An attacker can leverage this access to install arbitrary .jsp files on the server, which will by default run under the context of SYSTEM.
IBM has issued an update to correct this vulnerability. More details can be found at: