CVE-2012-3309

2012-08-2922:55:01

CWE-352

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.002

Percentile

55.3%

JSON

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Affected configurations

Nvd

Node

ibminfosphere_guardiumRange≤8.2

ibminfosphere_guardiumMatch8.00

ibminfosphere_guardiumMatch8.01

VendorProductVersionCPE
ibminfosphere_guardium*cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*
ibminfosphere_guardium8.00cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*
ibminfosphere_guardium8.01cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_guardium	*	cpe:2.3:a:ibm:infosphere_guardium::::::::
ibm	infosphere_guardium	8.00	cpe:2.3:a:ibm:infosphere_guardium:8.00:::::::*
ibm	infosphere_guardium	8.01	cpe:2.3:a:ibm:infosphere_guardium:8.01:::::::*