PT-2013-1507 · Ibm · Ibm Infosphere Datastage

Published 2013-01-31 · Updated 2017-08-29 · CVE-2012-0701

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions InfoSphere DataStage versions 8.1, 8.5 before FP3, and 8.7

Description The issue concerns the client applications in the DataStage Administrator client, which rely on client-side access control. This allows remote authenticated users to gain privileges via unspecified vectors.

Recommendations For versions 8.1, 8.5 before FP3, and 8.7, consider restricting access to the DataStage Administrator client until a fix is available. As a temporary workaround, limit the privileges of remote authenticated users to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0701

Affected Products

Ibm Infosphere Datastage

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-0701 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73285 · Note