PT-2013-1485 · Ibm · Ibm Infosphere Information Server+1

Publicado 2013-01-31 · Atualizado 2017-08-29 · CVE-2012-0204

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions InfoSphere Information Server versions 8.1 through 9.1 InfoSphere Import Export Manager versions 8.1 through 9.1 InfoSphere Information Server version 8.5 before FP3 InfoSphere Information Server version 8.7

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability in InfoSphere Import Export Manager in IBM InfoSphere Information Server.

Recommendations For InfoSphere Information Server versions 8.1 through 9.1, update to a version that includes the fix for this issue. For InfoSphere Import Export Manager versions 8.1 through 9.1, update to a version that includes the fix for this issue. For InfoSphere Information Server version 8.5 before FP3, apply FP3 or a later fix pack to resolve the issue. For InfoSphere Information Server version 8.7, update to a version that includes the fix for this issue.

Correção

Identificadores relacionados

CVE-2012-0204

Produtos afetados

Infosphere Import Export Manager

Ibm Infosphere Information Server

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73255 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0204 · Nota de Segurança