CVE-2012-4845 — IBM Vios vulnerability

CWE-2643 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.5%
top 32.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM AIXIBM Vios
Timeline
PublishedOct 20
Latest updateMay 13

Description

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.

CVSS vector

AV:N/AC:L/C:C/I:N/A:NExploitability: 8.0 | Impact: 6.9

Affected Packages2 packages

▶NVDibm/vios2.2.1.4
▶NVDibm/aix6.1, 7.1+1

🔴Vulnerability Details

2
GHSA
GHSA-93qv-cxhg-7w34: The FTP client in IBM AIX 6↗2022-05-13
▶
CVEList
CVE-2012-4845: The FTP client in IBM AIX 6↗2012-10-20
▶
CVE-2012-4845 — IBM Vios vulnerability | cvebase