CVE-2012-3311
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not…
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.
- CVSS 2.0
- 3.3 LOWAV:L/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/websphere application server
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388
- http://www.ibm.com/support/docview.wss?uid=swg21611313Vendor Advisory
- http://www.securityfocus.com/bid/55671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77697
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388
- http://www.ibm.com/support/docview.wss?uid=swg21611313Vendor Advisory
- http://www.securityfocus.com/bid/55671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77697
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.