PT-2013-1506 · Ibm · Infosphere Fasttrack+1

Published 2013-01-31 · Updated 2017-08-29 · CVE-2012-0700

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions InfoSphere FastTrack versions 8.1 through 8.7 IBM InfoSphere Information Server versions 8.1 through 8.5 before FP3 IBM InfoSphere Information Server version 8.7

Description The issue concerns the improper storage of credentials by the client in the affected software, allowing local users to bypass intended access restrictions.

Recommendations For InfoSphere FastTrack versions 8.1 through 8.7, update to a version that properly stores credentials. For IBM InfoSphere Information Server versions 8.1 through 8.5, apply FP3 or a later fix pack to address the issue. For IBM InfoSphere Information Server version 8.7, update to a version that properly stores credentials.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-0700

Affected Products

Infosphere Fasttrack

Ibm Infosphere Information Server

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0700 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73266 · Note