PT-2012-6088 · Ibm · Ibm Websphere Datapower Xc10 Appliance

Publicado 2012-11-23 · Atualizado 2017-08-29 · CVE-2012-5758

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 Appliance versions 2.0.0.0 through 2.0.0.3 IBM WebSphere DataPower XC10 Appliance versions 2.1.0.0 through 2.1.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in a process exit, due to the lack of authentication for an unspecified interface. The exact vectors used for the attack are not specified.

Recommendations For versions 2.0.0.0 through 2.0.0.3, consider restricting access to the unspecified interface until a fix is available. For versions 2.1.0.0 through 2.1.0.2, consider implementing authentication for the interface to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-5758

Produtos afetados

Ibm Websphere Datapower Xc10 Appliance

Referências · 8

• http://securitytracker.com/id?1027798 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21615783 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC86908 · Aviso do Fabricante
• http://secunia.com/advisories/51319 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80063 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24033740 · Aviso do Fabricante
• http://securityfocus.com/bid/56617 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5758 · Nota de Segurança