PT-2013-1506 · Ibm · Infosphere Fasttrack+1

Publicado 2013-01-31 · Atualizado 2017-08-29 · CVE-2012-0700

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions InfoSphere FastTrack versions 8.1 through 8.7 IBM InfoSphere Information Server versions 8.1 through 8.5 before FP3 IBM InfoSphere Information Server version 8.7

Description The issue concerns the improper storage of credentials by the client in the affected software, allowing local users to bypass intended access restrictions.

Recommendations For InfoSphere FastTrack versions 8.1 through 8.7, update to a version that properly stores credentials. For IBM InfoSphere Information Server versions 8.1 through 8.5, apply FP3 or a later fix pack to address the issue. For IBM InfoSphere Information Server version 8.7, update to a version that properly stores credentials.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-0700

Produtos afetados

Infosphere Fasttrack

Ibm Infosphere Information Server

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0700 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73266 · Nota