CVE-2012-4816

Published: Dec 26, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots in HTTP sessions on port 8080.

Affected (6)

Products: Ibm: Rational Automation Framework

Ibm

1 product

Rational Automation Framework

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Automation Framework	Version 3.0.0.1
Ibm Rational Automation Framework	Version 3.0.0.2
Ibm Rational Automation Framework	Version 3.0.0.3
Ibm Rational Automation Framework	Version 3.0.0.4
Ibm Rational Automation Framework	Version 3.0.0.5
Ibm Rational Automation Framework	Version 3.0

Related CWEs

CWE-264

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21620359

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78379

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21620359

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78379

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.