← Back

CVE-2012-3311

nvd nist
Published: Sep 25, 2012Modified: Apr 29, 2026

JSON object

Loading...
3.3
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 3.4 / Impact: 4.9
Source: NVD

Description

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.

Affected (51)

1 product
Websphere Application Server
Configuration A
51 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Version 6.1.0.0
Version 6.1.0.11
Version 6.1.0.12
Version 6.1.0.15
Version 6.1.0.17
Version 6.1.0.19
Version 6.1.0.1
Version 6.1.0.21
Version 6.1.0.23
Version 6.1.0.25
Version 6.1.0.27
Version 6.1.0.29
Version 6.1.0.2
Version 6.1.0.31
Version 6.1.0.33
Version 6.1.0.35
Version 6.1.0.37
Version 6.1.0.39
Version 6.1.0.3
Version 6.1.0.41
Version 6.1.0.43
Version 6.1.0.4
Version 6.1.0.5
Version 6.1.0.7
Version 6.1.0.9
Version 6.1.0
Version 7.0.0.10
Version 7.0.0.11
Version 7.0.0.13
Version 7.0.0.14
Version 7.0.0.15
Version 7.0.0.16
Version 7.0.0.17
Version 7.0.0.19
Version 7.0.0.1
Version 7.0.0.21
Version 7.0.0.23
Version 7.0.0.2
Version 7.0.0.3
Version 7.0.0.4
Version 7.0.0.5
Version 7.0.0.6
Version 7.0.0.7
Version 7.0.0.8
Version 7.0.0.9
Version 8.0.0.0
Version 8.0.0.1
Version 8.0.0.2
Version 8.0.0.3
Version 8.0.0.4
Version 8.5.0.0
Running on/withPlatform Versions
Ibm
Z/os
All versions

Related CWEs

References (8)

Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.