CVE-2012-3325 in WebSphere Application Server

Summary

IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 06/07/2012
• Disclosure: 08/30/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-61956
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.5
• EPSS: 0.00969
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3325
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3325
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3325/