CVEvulnerability
CVE-2012-0705
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not validate unspecified input data, which allows remote authenticated users to execute arbitrary commands via unknown vectors.
Affected configurations
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.5.0.1
• ibm infosphere information server 8.5.0.2
• ibm infosphere information server 8.7
• ibm infosphere information server 9.1
• ibm infosphere information server metabrokers \& bridges
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73292 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73292 exchange.xforce.ibmcloud.com