PT-2013-1507 · Ibm · Ibm Infosphere Datastage

Publicado 2013-01-31 · Atualizado 2017-08-29 · CVE-2012-0701

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions InfoSphere DataStage versions 8.1, 8.5 before FP3, and 8.7

Description The issue concerns the client applications in the DataStage Administrator client, which rely on client-side access control. This allows remote authenticated users to gain privileges via unspecified vectors.

Recommendations For versions 8.1, 8.5 before FP3, and 8.7, consider restricting access to the DataStage Administrator client until a fix is available. As a temporary workaround, limit the privileges of remote authenticated users to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0701

Produtos afetados

Ibm Infosphere Datastage

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-0701 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73285 · Nota