CVE-2012-3311 in WebSphere Application Server
Zusammenfassung (Englisch)
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
07.06.2012
Veröffentlichung
25.09.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 6548 | IBM WebSphere Application Server CBIND Check erweiterte Rechte | 264 | Unbewiesen | Offizieller Fix | CVE-2012-3311 |