CVE-2012-3338

Published: Sep 1, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286.

Affected (3)

Products: Ibm: Infosphere Guardium

1 product

Infosphere Guardium

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Guardium	Version 8.01
Ibm Infosphere Guardium	Version 8.0
Ibm Infosphere Guardium	Version 8.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21611126

Source: psirt@us.ibm.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/78286

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21611126

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/78286

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.