Auth bypass in IBM Rational System Architect
CVE-2011-1207
The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v2 metric
CVSS v2 base score 9.3 (High). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.053 (92.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 92.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.053 · newest: 0.053 · change: 0.000
Affected products
- IBM Rational System Architect — versions 11.3, 11.3.1, 11.3.1.1
Weakness classification (CWE)
References
- securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry)
- secunia.com/advisories/43474 (Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2011/1129 (vdb-entry, Vendor Advisory)
- secunia.com/advisories/43399 (Vendor Advisory, third-party-advisory)
- www.securityfocus.com/bid/47643 (VDB Entry, Third Party Advisory, vdb-entry)
- www.ibm.com/support/docview.wss (Patch, Vendor Advisory)