First published: Fri Nov 23 2012(Updated: )
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service (process exit) via unknown vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM WebSphere DataPower XC10 Appliance | =2.0.0.0 | |
IBM WebSphere DataPower XC10 Appliance | =2.0.0.1 | |
IBM WebSphere DataPower XC10 Appliance | =2.0.0.2 | |
IBM WebSphere DataPower XC10 Appliance | =2.0.0.3 | |
IBM WebSphere DataPower XC10 Appliance | =2.1.0.0 | |
IBM WebSphere DataPower XC10 Appliance | =2.1.0.1 | |
IBM WebSphere DataPower XC10 Appliance | =2.1.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-5758 is considered a medium severity vulnerability due to its potential for denial of service.
To fix CVE-2012-5758, you should update the IBM WebSphere DataPower XC10 Appliance to a patched version that requires authentication for the affected interface.
CVE-2012-5758 affects IBM WebSphere DataPower XC10 Appliance versions 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2.
CVE-2012-5758 allows remote attackers to execute a denial of service attack that can cause a process exit.
No, CVE-2012-5758 does not require authentication for the unspecified vulnerable interface.