CVEvulnerability
CVE-2012-5938
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.
Affected configurations
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.7
• ibm infosphere information server 9.1
Related
Weakness · not in database (1)
References
- http://www.ibm.com/support/docview.wss?uid=swg21628844 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80493 exchange.xforce.ibmcloud.com
- http://www.ibm.com/support/docview.wss?uid=swg21628844 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80493 exchange.xforce.ibmcloud.com