Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-5759

Overview

Vulnerability Score 9.0 9.0
CVE Id CVE-2012-5759
Last Modified 29 May 2013 11:19:30
Published 23 Nov 2012 07:09:58
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication SINGLE_INSTANCE

CVE-2012-5759

Summary

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.

Vulnerable Systems


References

XF - websphere-datapower-priv-escalation(80062)

CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg24033740

CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21615783

AIXAPAR - IC85748

OSVDB - 87620

SECTRACK - 1027798

BID - 56617

SECUNIA - 51319


Last Updated: 27 May 2016 10:58:30