PT-2012-6089 · Ibm · Ibm Websphere Datapower Xc10 Appliance

Publicado 2012-11-23 · Atualizado 2017-08-29 · CVE-2012-5759

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 Appliance versions 2.0.0.0 through 2.0.0.3 IBM WebSphere DataPower XC10 Appliance versions 2.1.0.0 through 2.1.0.2

Description The issue allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations.

Recommendations For versions 2.0.0.0 through 2.0.0.3, update to a version outside of this range to mitigate the risk. For versions 2.1.0.0 through 2.1.0.2, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting JMX operations to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5759

Produtos afetados

Ibm Websphere Datapower Xc10 Appliance

Referências · 9

• http://securitytracker.com/id?1027798 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC85748 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80062 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5759 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21615783 · Aviso do Fabricante
• http://secunia.com/advisories/51319 · Nota
• http://osvdb.org/87620 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24033740 · Nota
• http://securityfocus.com/bid/56617 · Nota