PT-2020-7215 · Ibm · Ibm Infosphere Guardium

Published 2020-09-01 · Updated 2020-09-04 · CVE-2012-3338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2

Description The issue allows a remote attacker to bypass security restrictions due to improper restrictions on the create new user account functionality. This could be exploited to create unprivileged user accounts.

Recommendations For IBM InfoSphere Guardium versions 8.0 through 8.2, consider restricting access to the user account creation functionality until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-3338

Affected Products

Ibm Infosphere Guardium

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-3338 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78286 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21611126 · Note
• https://t.me/cibsecurity/14416 · Telegram Post