PT-2013-1486 · Ibm · Ibm Infosphere Information Server

Published 2013-01-31 · Updated 2017-08-29 · CVE-2012-0205

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 8.7 IBM InfoSphere Information Server version 8.5 before FP3

Description The issue concerns the troubleshooting feature in InfoSphere Metadata Workbench (MWB), which does not properly restrict its use. This allows remote authenticated users to bypass intended access restrictions or cause a denial of service, resulting in a workbench outage.

Recommendations For IBM InfoSphere Information Server versions 8.1 through 8.7, restrict access to the troubleshooting feature to minimize the risk of exploitation. For IBM InfoSphere Information Server version 8.5, apply FP3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected versions.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0205

Affected Products

Ibm Infosphere Information Server

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0205 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73265 · Note