CVEvulnerability
CVE-2012-0702
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privileges via unspecified vectors.
Affected configurations
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.5.0.1
• ibm infosphere information server 8.5.0.2
• ibm infosphere information server 8.7
• ibm infosphere information server information services framework
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73287 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73287 exchange.xforce.ibmcloud.com