CVE-2012-0204
Published Jan 31, 2013
Last updated 7 years ago
Overview
- Description
- Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
- Source
- psirt@us.ibm.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
- Impact
- Per: http://www-01.ibm.com/support/docview.wss?uid=swg21623501 "CVSS Base Score: 9.3 / CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C) a malicious user who has access to a machine with the Import Export Manager installed could execute arbitrary commands in the context of any user who accesses the Import Export Manager application. "
- Solution
- Per: http://www-01.ibm.com/support/docview.wss?uid=swg21623501 "CVSS Base Score: 9.3 / CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C) a malicious user who has access to a machine with the Import Export Manager installed could execute arbitrary commands in the context of any user who accesses the Import Export Manager application. "
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A85A0D3-1941-4F6B-8787-286A009440DC"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "915337FC-0BFD-44FB-A7D2-765E1422DD4A"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "276EFD18-CD4A-4F1A-AAF2-953F22B075DA"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DEC85B5-BFB8-4B07-8F63-0752C94E58FF"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27BE8D08-C377-4248-ADB7-69962F5D2C3F"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E47D3B91-D36A-4F16-9874-41376887B6D1"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "317FAE67-76E2-4084-9393-8A02D255BAF5"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA7096B4-291F-49BB-8DBC-E67AC901CF08"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D547E88D-FE3F-4C90-B7D8-301A1449E9AB"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5585D2C4-6575-4469-A6EF-CCDC3A0BEDB2"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42A9CF5C-79EC-4BBF-92AF-2AB3DC125684"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_information_server_metabrokers_\\&_bridges:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81D571DC-7829-4F9C-A959-36E586B4C7C8"
}
],
"operator": "OR"
}
]
}
]