First published: Thu Sep 29 2022(Updated: )
IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM InfoSphere Information Analyzer | =8.1 | |
IBM InfoSphere Information Analyzer | =8.5 | |
IBM InfoSphere Information Analyzer | =8.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4818 has been classified as a medium severity vulnerability.
To fix CVE-2012-4818, ensure that proper directory restrictions are implemented within the IBM InfoSphere Information Server.
CVE-2012-4818 affects IBM InfoSphere Information Server versions 8.1, 8.5, and 8.7.
CVE-2012-4818 allows remote authenticated attackers to access sensitive information through inadequate directory restrictions.
To identify if your system is vulnerable to CVE-2012-4818, review the application logs and configuration settings in the affected versions of IBM InfoSphere Information Server.