PT-2013-1486 · Ibm · Ibm Infosphere Information Server

Publicado 2013-01-31 · Atualizado 2017-08-29 · CVE-2012-0205

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 8.7 IBM InfoSphere Information Server version 8.5 before FP3

Description The issue concerns the troubleshooting feature in InfoSphere Metadata Workbench (MWB), which does not properly restrict its use. This allows remote authenticated users to bypass intended access restrictions or cause a denial of service, resulting in a workbench outage.

Recommendations For IBM InfoSphere Information Server versions 8.1 through 8.7, restrict access to the troubleshooting feature to minimize the risk of exploitation. For IBM InfoSphere Information Server version 8.5, apply FP3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected versions.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0205

Produtos afetados

Ibm Infosphere Information Server

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0205 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73265 · Nota