Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5938

Опубликовано: 20 мар. 2013
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
cpe:2.3:o:novell:unixware:*:*:*:*:*:*:*:*

EPSS

Процентиль: 11%
0.00037
Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

github
больше 3 лет назад

The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.

EPSS

Процентиль: 11%
0.00037
Низкий

7.2 High

CVSS2

Дефекты

CWE-264