CVE-2012-4818 — IBM Infosphere Information Server vulnerability

3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.2%

top 58.52%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Information Server

Timeline

PublishedSep 29

Latest updateSep 30

Description

IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/infosphere_information_server8.1, 8.5, 8.7+2

🔴Vulnerability Details

GHSA

GHSA-2xvj-f2r6-3cg7: IBM InfoSphere Information Server 8↗2022-09-30

▶

CVEList

CVE-2012-4818: IBM InfoSphere Information Server 8↗2020-08-28

▶