Lucene search

K
cveIbmCVE-2012-0701
HistoryJan 31, 2013 - 12:06 p.m.

CVE-2012-0701

2013-01-3112:06:17
CWE-264
ibm
web.nvd.nist.gov
28
ibm
infosphere
datastage
information server
cve-2012-0701
security
vulnerability
access control
remote
authentication

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

55.6%

The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors.

Affected configurations

Nvd
Node
ibminfosphere_datastageMatch-
OR
ibminfosphere_information_serverMatch8.1
OR
ibminfosphere_information_serverMatch8.5
OR
ibminfosphere_information_serverMatch8.5.0.1
OR
ibminfosphere_information_serverMatch8.5.0.2
OR
ibminfosphere_information_serverMatch8.7
VendorProductVersionCPE
ibminfosphere_datastage-cpe:2.3:a:ibm:infosphere_datastage:-:*:*:*:*:*:*:*
ibminfosphere_information_server8.1cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.5cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.1cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.2cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*
ibminfosphere_information_server8.7cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

55.6%

Related for CVE-2012-0701