CVE-2012-0700

2013-01-3112:06:17

CWE-255

[email protected]

web.nvd.nist.gov

infosphere

fasttrack

ibm

information server

cve-2012-0700

credential storage

access restrictions

6.2 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors.

Affected configurations

NVD

Node

ibminfosphere_fasttrackMatch8.1

ibminfosphere_fasttrackMatch8.1.1

ibminfosphere_fasttrackMatch8.1.2

ibminfosphere_fasttrackMatch8.5

ibminfosphere_fasttrackMatch8.7

ibminfosphere_information_serverMatch8.1

ibminfosphere_information_serverMatch8.5

ibminfosphere_information_serverMatch8.5.0.1

ibminfosphere_information_serverMatch8.5.0.2

ibminfosphere_information_serverMatch8.7

CPENameOperatorVersion
ibm:infosphere_fasttrackibm infosphere fasttrackeq8.1
ibm:infosphere_fasttrackibm infosphere fasttrackeq8.1.1
ibm:infosphere_fasttrackibm infosphere fasttrackeq8.1.2
ibm:infosphere_fasttrackibm infosphere fasttrackeq8.5
ibm:infosphere_fasttrackibm infosphere fasttrackeq8.7
ibm:infosphere_information_serveribm infosphere information servereq8.1
ibm:infosphere_information_serveribm infosphere information servereq8.5
ibm:infosphere_information_serveribm infosphere information servereq8.5.0.1
ibm:infosphere_information_serveribm infosphere information servereq8.5.0.2
ibm:infosphere_information_serveribm infosphere information servereq8.7

CPE	Name	Operator	Version
ibm:infosphere_fasttrack	ibm infosphere fasttrack	eq	8.1
ibm:infosphere_fasttrack	ibm infosphere fasttrack	eq	8.1.1
ibm:infosphere_fasttrack	ibm infosphere fasttrack	eq	8.1.2
ibm:infosphere_fasttrack	ibm infosphere fasttrack	eq	8.5
ibm:infosphere_fasttrack	ibm infosphere fasttrack	eq	8.7
ibm:infosphere_information_server	ibm infosphere information server	eq	8.1
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5.0.1
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5.0.2
ibm:infosphere_information_server	ibm infosphere information server	eq	8.7