DATABASE RESOURCES PRICING ABOUT US

{"id": "CVE-2012-3317", "vendorId": null, "type": "cve", "bulletinFamily": "NVD", "title": "CVE-2012-3317", "description": "IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300.", "published": "2012-12-05T11:57:00", "modified": "2017-08-29T01:31:00", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector": "LOCAL", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 6.9}, "severity": "MEDIUM", "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "cvss3": {}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3317", "reporter": "psirt@us.ibm.com", "references": ["http://www.ibm.com/support/docview.wss?uid=swg21611401", "http://www-01.ibm.com/support/docview.wss?uid=swg1IC85477", "https://exchange.xforce.ibmcloud.com/vulnerabilities/77818"], "cvelist": ["CVE-2012-3317"], "immutableFields": [], "lastseen": "2022-03-23T12:34:47", "viewCount": 10, "enchantments": {"dependencies": null, "score": {"value": 4.6, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": 4.6}, "_state": {"dependencies": 1659689601, "score": 1659761193, "affected_software_major_version": 1671558332}, "_internal": {}, "cna_cvss": {"cna": null, "cvss": {}}, "cpe": ["cpe:/a:ibm:websphere_message_broker:8.0", "cpe:/a:ibm:websphere_message_broker:6.1.0.4", "cpe:/a:ibm:websphere_message_broker:7.0.0.1", "cpe:/a:ibm:websphere_message_broker:7.0.0.4", "cpe:/a:ibm:websphere_message_broker:7.0.0.3", "cpe:/a:ibm:websphere_message_broker:8.0.0.1", "cpe:/a:ibm:websphere_message_broker:6.1.0.5", "cpe:/a:ibm:websphere_message_broker:6.1", "cpe:/a:ibm:websphere_message_broker:6.1.0.6", "cpe:/a:ibm:websphere_message_broker:7.0.", "cpe:/a:ibm:websphere_message_broker:6.1.0.1", "cpe:/a:ibm:websphere_message_broker:7.0.0.2", "cpe:/a:ibm:websphere_message_broker:6.1.0.2", "cpe:/a:ibm:websphere_message_broker:6.1.0.3", "cpe:/a:ibm:websphere_message_broker:6.1.0.7", "cpe:/a:ibm:websphere_message_broker:6.1.0.8", "cpe:/a:ibm:websphere_message_broker:6.1.0.9", "cpe:/a:ibm:websphere_message_broker:6.1.0.10"], "cpe23": ["cpe:2.3:a:ibm:websphere_message_broker:6.1.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.9:*:*:*:*:*:*:*"], "cwe": ["CWE-264"], "affectedSoftware": [{"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.10", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.9", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.2", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.1", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.4", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.3", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.6", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.5", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.8", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1.0.7", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "6.1", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "7.0.0.1", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "7.0.0.3", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "7.0.0.4", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "7.0.", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "7.0.0.2", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "8.0", "operator": "eq", "name": "ibm websphere message broker"}, {"cpeName": "ibm:websphere_message_broker", "version": "8.0.0.1", "operator": "eq", "name": "ibm websphere message broker"}], "affectedConfiguration": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.10:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.9:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.2:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.1:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.4:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.3:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.6:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.5:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.8:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.7:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*", "cpe_name": []}]}, {"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*", "cpe_name": []}]}, {"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*", "cpe_name": []}, {"vulnerable": true, "cpe23Uri": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*", "cpe_name": []}]}]}, "extraReferences": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg21611401", "name": "http://www.ibm.com/support/docview.wss?uid=swg21611401", "refsource": "CONFIRM", "tags": ["Vendor Advisory"]}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC85477", "name": "IC85477", "refsource": "AIXAPAR", "tags": []}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77818", "name": "wmb-uninstallerjvm-privilege-escalation(77818)", "refsource": "XF", "tags": []}]}

{}