Lucene search

IbmCVE-2012-3312

HistoryAug 29, 2012 - 10:55 p.m.

CVE-2012-3312

2012-08-2922:55:01

CWE-310

ibm

web.nvd.nist.gov

ibm

infosphere

guardium

cve-2012-3312

password

transmission

network sniffing

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected configurations

Nvd

Node

ibminfosphere_guardiumRange≤8.2

ibminfosphere_guardiumMatch8.00

ibminfosphere_guardiumMatch8.01

VendorProductVersionCPE
ibminfosphere_guardium*cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*
ibminfosphere_guardium8.00cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*
ibminfosphere_guardium8.01cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_guardium	*	cpe:2.3:a:ibm:infosphere_guardium::::::::
ibm	infosphere_guardium	8.00	cpe:2.3:a:ibm:infosphere_guardium:8.00:::::::*
ibm	infosphere_guardium	8.01	cpe:2.3:a:ibm:infosphere_guardium:8.01:::::::*

References

en.securitylab.ru/lab/

en.securitylab.ru/lab/PT-2012-15

www.ibm.com/support/docview.wss?uid=swg21609224

exchange.xforce.ibmcloud.com/vulnerabilities/77785

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Related for CVE-2012-3312