CVE-2012-4850 in WebSphere Application Server

Résumé

par MITRE

IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 06/09/2012
• Divulgation: 14/11/2012
• Modérer: accepté
• Entrée: VDB-6954
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.02409
• KEV: non
• Activités: très faible
• Secteur: Pharma, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4850
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4850
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4850/