CVE-2012-4861
Published Apr 1, 2013
Last updated 7 years ago
Overview
- Description
- The web server in InfoSphere Data Replication Dashboard in IBM InfoSphere Replication Server 9.7 and 10.1 through 10.1.0.4 allows remote authenticated users to list directories via a direct request for a directory URL.
- Source
- psirt@us.ibm.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:infosphere_replication_server:9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D07C3842-2936-46B2-BBBC-740D5E03C827" }, { "criteria": "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B01E8FF-F3D4-43E5-BA93-40C5410E7CD5" }, { "criteria": "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E742F11-4838-4CF8-8182-934BC3ABFDD9" }, { "criteria": "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96287FE5-08B9-4B4F-9044-8631E0DDC1F3" }, { "criteria": "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84A77B09-DBF3-4719-BC81-E6E1453FB346" } ], "operator": "OR" } ] } ]