PT-2013-1508 · Ibm · Ibm Infosphere Information Server

Publicado 2013-01-31 · Atualizado 2017-08-29 · CVE-2012-0702

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Information Services Framework (ISF) in IBM InfoSphere Information Server versions 8.1, 8.5 before FP3, and 8.7

Description The issue concerns improper authorization determination, allowing remote authenticated users to gain privileges.

Recommendations For version 8.1, update to a version that properly determines authorization. For version 8.5, apply FP3 or a later fix pack to address the issue. For version 8.7, update to a version that properly determines authorization.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-0702

Produtos afetados

Ibm Infosphere Information Server

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/73287 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0702 · Nota de Segurança