CVE-2012-3311 in WebSphere Application Server
Summary
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/07/2012
Disclosure
09/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6548 | IBM WebSphere Application Server CBIND Check access control | 264 | Unproven | Official fix | CVE-2012-3311 |