CVE-2012-0703

IBM InfoSphere Information Server CVE-2012-0703 is an open redirect vulnerability in the Information Services Framework (ISF) used by IBM InfoSphere Information Server. The issue affects versioned ISF/Web components in 8.1, 8.5 before FP3, and 8.7, enabling remote attackers to redirect users to a...

CVE-2012-0705

CVE-2012-0705 affects IBM InfoSphere Information Server Import Export Manager (in the MBB/bridges component) across 8.1, 8.5 (pre-FP3), 8.7 and 9.1. Root cause: lack of input validation on unspecified data, enabling remote authenticated users to execute arbitrary commands via unknown vectors. Doc...

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2012-3309

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

Design/Logic Flaw

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2012-3309

IBM InfoSphere Guardium 8.2 and earlier are affected by CVE-2012-3309: the account-creation panel is vulnerable to CSRF when CSRF filtering (csrf_status) is disabled, allowing an attacker to create an administrative account and hijack admin authentication. Affected versions: 8.2 and earlier. CVSS...

CVE-2012-3312

The CVE-2012-3312 issue affects IBM InfoSphere Guardium 8.2 and earlier, where the datasource definition editor transmits passwords in clear text when the save-password setting is enabled, enabling remote attackers to obtain database credentials by sniffing the network. The IBM Security Bulletin ...

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2012-3309

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

Buffer overflow

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

Information disclosure

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1) is affected by CVE-2011-3124, which assigns incorrect ownership to unspecified files, enabling local privilege escalation. The Red Hat/NVD entries confirm the affected product, but do...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1 and other products) is vulnerable to local privilege escalation caused by weak permissions on unspecified files. The description indicates that local users can gain privileges via unkn...

IBM InfoSphere Information Server存在缓冲区溢出和跨站脚本漏洞

Bugraq ID: 37245, 37246 IBM InfoSphere Information Server是一款数据集成软件平台，可以帮助企业从分散在系统中的复杂的异类信息中获得更多价值。 IBM InfoSphere Information Server存在多个安全漏洞，本地用户可以提升特权或进行跨站脚本攻击。 -传递给信息服务器WEB控制台的参数缺少充分过滤，攻击者可以进行跨站脚本攻击，获得敏感信息。 -DataStage中的部分SETUID程序存在错误，可触发缓冲区溢出。 IBM InfoSphere Information Server 8.1 IBM InfoSpher...

Buffer overflow

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...