PT-2011-4254 · Ibm · Ibm Infosphere Information Server+1

Publicado 2011-08-10 · Atualizado 2012-06-15 · CVE-2011-3123

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 IBM InfoSphere DataStage versions 8.5 and 8.5.0.1

Description The issue is related to weak permissions for unspecified files, which allows local users to gain privileges. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For IBM InfoSphere Information Server versions 8.5 and 8.5.0.1, update the permissions for the affected files to prevent local users from gaining privileges. For IBM InfoSphere DataStage versions 8.5 and 8.5.0.1, update the permissions for the affected files to prevent local users from gaining privileges.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-3123

Produtos afetados

Ibm Infosphere Datastage

Ibm Infosphere Information Server

Referências · 6

• http://secunia.com/advisories/45036 · Aviso do Fabricante
• http://securityfocus.com/bid/48516 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3123 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg24030333 · Nota
• http://ibm.com/support/docview.wss?uid=swg21504279 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769 · Aviso do Fabricante