CVE-2012-4818: Medium severity IBM InfoSphere Information Server vulnerability

Published Aug 28, 2020

Updated

IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.

Affected Software

3 affected components

IBM InfoSphere Information Server=8.1

IBM InfoSphere Information Server=8.5

IBM InfoSphere Information Server=8.7

Event History

Aug 28, 2020

CVE Published

via MITRE·08:01 PM

Data Sourced

via MITRE·08:01 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4818?

CVE-2012-4818 has been classified as a medium severity vulnerability.

How do I fix CVE-2012-4818?

To fix CVE-2012-4818, ensure that proper directory restrictions are implemented within the IBM InfoSphere Information Server.

Which versions of IBM InfoSphere Information Server are affected by CVE-2012-4818?

CVE-2012-4818 affects IBM InfoSphere Information Server versions 8.1, 8.5, and 8.7.

What kind of attack does CVE-2012-4818 allow?

CVE-2012-4818 allows remote authenticated attackers to access sensitive information through inadequate directory restrictions.

Is there a way to identify if my system is vulnerable to CVE-2012-4818?

To identify if your system is vulnerable to CVE-2012-4818, review the application logs and configuration settings in the affected versions of IBM InfoSphere Information Server.