Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-5938

Overview

Vulnerability Score 7.2 7.2
CVE Id CVE-2012-5938
Last Modified 21 Mar 2013 11:11:39
Published 20 Mar 2013 10:55:04
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2012-5938

Summary

The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.

Vulnerable Systems

Application

  • Ibm Infosphere Information Server 8.1

  • Ibm Infosphere Information Server 8.5

  • Ibm Infosphere Information Server 8.7

  • Ibm Infosphere Information Server 9.1


References

XF - infosphere-file-priv-esc(80493)

CONFIRM - http://www.ibm.com/support/docview.wss?uid=swg21628844


Last Updated: 27 May 2016 11:02:05