CVEvulnerability
CVE-2012-3311
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-09-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.
Affected configurations
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.4
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 6.1.0.35
• ibm websphere application server 6.1.0.37
• ibm websphere application server 6.1.0.39
• ibm websphere application server 6.1.0.41
• ibm websphere application server 6.1.0.43
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.14
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.16
• ibm websphere application server 7.0.0.17
• ibm websphere application server 7.0.0.19
• ibm websphere application server 7.0.0.21
• ibm websphere application server 7.0.0.23
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
• ibm websphere application server 8.0.0.4
• ibm websphere application server 8.5.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21611313 Vendor Advisory
- http://www.securityfocus.com/bid/55671 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77697 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21611313 Vendor Advisory
- http://www.securityfocus.com/bid/55671 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77697 exchange.xforce.ibmcloud.com