CVE-2012-4818

Опубликовано: 29 сент. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/78651
VDB Entry
Vendor Advisory
https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-may-allow-access-to-sensitive-data-stored-on-ibm-infosphere-information-server-cve-2012-4818/?lnk=hm
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78651
VDB Entry
Vendor Advisory
https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-may-allow-access-to-sensitive-data-stored-on-ibm-infosphere-information-server-cve-2012-4818/?lnk=hm
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00195

Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-2xvj-f2r6-3cg7