PT-2012-5594 · Ibm · Ibm Rational Automation Framework

Publicado 2012-12-26 · Atualizado 2017-08-29 · CVE-2012-4816

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Rational Automation Framework (RAF) versions 3.x through 3.0.0.5

Description The issue allows remote attackers to bypass intended access restrictions in the Env Gen Wizard by visiting specific context roots in HTTP sessions on port 8080.

Recommendations For versions 3.x through 3.0.0.5, restrict access to the Env Gen Wizard to minimize the risk of exploitation. Consider configuring the HTTP sessions on port 8080 to limit unauthorized access until a fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-4816

Produtos afetados

Ibm Rational Automation Framework

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21620359 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78379 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4816 · Nota de Segurança