CVE-2012-0702

2013-01-3112:06:17

CWE-287

[email protected]

web.nvd.nist.gov

ibm infosphere

isf

cve-2012-0702

authorization bypass

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.3%

JSON

Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privileges via unspecified vectors.

Affected configurations

NVD

Node

ibminfosphere_information_serverMatch8.1

ibminfosphere_information_serverMatch8.5

ibminfosphere_information_serverMatch8.5.0.1

ibminfosphere_information_serverMatch8.5.0.2

ibminfosphere_information_serverMatch8.7

ibminfosphere_information_server_information_services_frameworkMatch-

CPENameOperatorVersion
ibm:infosphere_information_serveribm infosphere information servereq8.1
ibm:infosphere_information_serveribm infosphere information servereq8.5
ibm:infosphere_information_serveribm infosphere information servereq8.5.0.1
ibm:infosphere_information_serveribm infosphere information servereq8.5.0.2
ibm:infosphere_information_serveribm infosphere information servereq8.7
ibm:infosphere_information_server_information_services_frameworkibm infosphere information server information services frameworkeq-

CPE	Name	Operator	Version
ibm:infosphere_information_server	ibm infosphere information server	eq	8.1
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5.0.1
ibm:infosphere_information_server	ibm infosphere information server	eq	8.5.0.2
ibm:infosphere_information_server	ibm infosphere information server	eq	8.7
ibm:infosphere_information_server_information_services_framework	ibm infosphere information server information services framework	eq	-