Auth bypass in IBM Infosphere Information Server
CVE-2012-0702
Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privileges via unspecified vectors.
Vulnerability class: Broken Authentication
EPSS: 0.009 (55.6th percentile) — read the EPSS interpretation.
Affected products
- Ibm Infosphere_information_server — versions 8.1, 8.5, 8.5.0.1
- Ibm Infosphere_information_server_information_services_framework
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)