CVE-2012-0700
First published: Thu Jan 31 2013(Updated: )
The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM InfoSphere FastTrack | =8.1 | |
| IBM InfoSphere FastTrack | =8.1.1 | |
| IBM InfoSphere FastTrack | =8.1.2 | |
| IBM InfoSphere FastTrack | =8.5 | |
| IBM InfoSphere FastTrack | =8.7 | |
| IBM InfoSphere Information Server | =8.1 | |
| IBM InfoSphere Information Server | =8.5 | |
| IBM InfoSphere Information Server | =8.5.0.1 | |
| IBM InfoSphere Information Server | =8.5.0.2 | |
| IBM InfoSphere Information Server | =8.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-0700?
CVE-2012-0700 is classified as a moderate severity vulnerability due to improper credential storage.
How do I fix CVE-2012-0700?
Fixing CVE-2012-0700 involves updating to the latest version of IBM InfoSphere FastTrack or Information Server that addresses the credential storage issue.
What versions of IBM InfoSphere are affected by CVE-2012-0700?
CVE-2012-0700 affects IBM InfoSphere FastTrack versions 8.1 through 8.7 and IBM InfoSphere Information Server versions 8.1 and 8.5 before FP3.
What type of access does CVE-2012-0700 allow attackers to bypass?
CVE-2012-0700 allows local users to bypass intended access restrictions through improper handling of credentials.
Is there a workaround for CVE-2012-0700?
There are no documented workarounds for CVE-2012-0700; updating to a patched version is recommended.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm infosphere fasttrack
- version/ibm infosphere fasttrack/8.1
- version/ibm infosphere fasttrack/8.1.1
- version/ibm infosphere fasttrack/8.1.2
- version/ibm infosphere fasttrack/8.5
- version/ibm infosphere fasttrack/8.7
- canonical/ibm infosphere information server
- version/ibm infosphere information server/8.1
- version/ibm infosphere information server/8.5
- version/ibm infosphere information server/8.5.0.1
- version/ibm infosphere information server/8.5.0.2
- version/ibm infosphere information server/8.7