Lucene search

IbmCVE-2012-3309

HistoryAug 29, 2012 - 10:55 p.m.

CVE-2012-3309

2012-08-2922:55:01

CWE-352

ibm

web.nvd.nist.gov

ibm

infosphere

guardium

csrf

vulnerability

account creation

authentication

administrators

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

55.3%

JSON

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Affected configurations

Nvd

Node

ibminfosphere_guardiumRange≤8.2

ibminfosphere_guardiumMatch8.00

ibminfosphere_guardiumMatch8.01

VendorProductVersionCPE
ibminfosphere_guardium*cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*
ibminfosphere_guardium8.00cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*
ibminfosphere_guardium8.01cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_guardium	*	cpe:2.3:a:ibm:infosphere_guardium::::::::
ibm	infosphere_guardium	8.00	cpe:2.3:a:ibm:infosphere_guardium:8.00:::::::*
ibm	infosphere_guardium	8.01	cpe:2.3:a:ibm:infosphere_guardium:8.01:::::::*

References

en.securitylab.ru/lab/

en.securitylab.ru/lab/PT-2012-15

www.ibm.com/support/docview.wss?uid=swg21609223

www.securitytracker.com/id?1027455

exchange.xforce.ibmcloud.com/vulnerabilities/77745

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

55.3%

JSON

Related for CVE-2012-3309