PT-2013-1484

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 8.7 IBM InfoSphere Metadata Workbench MWB versions 8.1 through 8.7 IBM InfoSphere Information Server 8.5 before FP3 Description A cross-site scripting XSS issue allows remote attackers to...

CVE-2012-4819: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers ...

PT-2013-1723

Name of the Vulnerable Software and Affected Versions Information Services Framework ISF in IBM InfoSphere Information Server versions 8.1 through 8.5 before FP3, 8.7 Information Services Framework ISF in IBM InfoSphere Business Glossary versions 8.1.1 through 8.1.2 Description The issue makes it...

PT-2013-1506

Name of the Vulnerable Software and Affected Versions InfoSphere FastTrack versions 8.1 through 8.7 IBM InfoSphere Information Server versions 8.1 through 8.5 before FP3 IBM InfoSphere Information Server version 8.7 Description The issue concerns the improper storage of credentials by the client ...

PT-2013-1509

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1, 8.5 before FP3, and 8.7 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For version 8.1, update to a fixed...

CVE-2012-4832: Exposure of Sensitive Information to an Unauthorized Actor

Information Services Framework ISF in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access b...

CVE-2012-3309

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

Design/Logic Flaw

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2012-3312

The CVE-2012-3312 issue affects IBM InfoSphere Guardium 8.2 and earlier, where the datasource definition editor transmits passwords in clear text when the save-password setting is enabled, enabling remote attackers to obtain database credentials by sniffing the network. The IBM Security Bulletin ...

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2012-3309

IBM InfoSphere Guardium 8.2 and earlier are affected by CVE-2012-3309: the account-creation panel is vulnerable to CSRF when CSRF filtering (csrf_status) is disabled, allowing an attacker to create an administrative account and hijack admin authentication. Affected versions: 8.2 and earlier. CVSS...

CVE-2012-3309

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

PT-2012-4642

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.2 and earlier Description A cross-site request forgery CSRF issue exists in the account-creation panel. This allows remote attackers to hijack the authentication of administrators for requests that create...

CVE-2012-3309: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering aka csrfstatus feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accoun...

CVE-2012-3312: Undefined Security Weakness

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2012-4644

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.2 and earlier Description The issue concerns the transmission of cleartext database credentials over the network when the save-password setting is enabled in the datasource definition editor. This allows remo...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...