CVE-2012-4832

Published: Jan 31, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected (7)

Products: Ibm: Infosphere Business Glossary, Infosphere Information Server

Ibm

2 products

Infosphere Business Glossary

Infosphere Information Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Business Glossary	Version 8.1.1
Ibm Infosphere Business Glossary	Version 8.1.2
Ibm Infosphere Information Server	Version 8.1
Ibm Infosphere Information Server	Version 8.5.0.1
Ibm Infosphere Information Server	Version 8.5.0.2
Ibm Infosphere Information Server	Version 8.5
Ibm Infosphere Information Server	Version 8.7

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21623501

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78906

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21623501

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78906

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.