CVE-2012-3311 — IBM Websphere Application Server vulnerability

CWE-2643 documents3 sources

Severity

3.3LOWNVD

EPSS

0.1%

top 83.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedSep 25

Latest updateMay 17

Description

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.

CVSS vector

AV:L/AC:M/C:P/I:P/A:NExploitability: 3.4 | Impact: 4.9

Affected Packages1 packages

▶NVDibm/websphere_application_server51 versions+50

🔴Vulnerability Details

GHSA

GHSA-8xxq-466x-jmgf: IBM WebSphere Application Server (WAS) 6↗2022-05-17

▶

CVEList

CVE-2012-3311: IBM WebSphere Application Server (WAS) 6↗2012-09-25

▶