CVE-2012-3311
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.
IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.45, 7.0 anteriores a v7.0.0.25, 8.0 anteriores a v8.0.0.5, y 8.5 anteriores a v8.5.0.1 en z/OS, en ciertas configuraciones que implican Federated Repositories para conexiones IIOP y Optimized Local Adapters, no hacen las comprobaciones CBIND, lo que permite a usuarios locales evitar las restricciones de acceso establecidas, y leer y modificar datos de aplicaciones, a travĂ©s de vectores no especĂficos.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-06-07 CVE Reserved
- 2012-09-25 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/55671 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/77697 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388 | 2017-08-29 | |
http://www.ibm.com/support/docview.wss?uid=swg21611313 | 2017-08-29 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.0 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.1 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.2 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.3 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.3" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.4 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.4" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.5 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.5" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.7 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.7" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.9 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.9" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.11 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.11" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.12 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.12" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.15 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.15" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.17 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.17" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.19 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.19" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.21 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.21" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.23 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.23" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.25 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.25" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.27 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.27" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.29 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.29" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.31 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.31" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.33 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.33" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.35 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.35" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.37 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.37" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.39 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.39" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.41 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.41" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 6.1.0.43 Search vendor "Ibm" for product "Websphere Application Server" and version "6.1.0.43" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.1 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.2 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.3 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.3" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.4 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.4" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.5 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.5" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.6 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.6" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.7 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.7" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.8 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.8" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.9 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.9" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.10 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.10" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.11 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.11" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.13 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.13" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.14 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.14" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.15 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.15" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.16 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.16" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.17 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.17" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.19 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.19" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.21 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.21" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 7.0.0.23 Search vendor "Ibm" for product "Websphere Application Server" and version "7.0.0.23" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.0.0.0 Search vendor "Ibm" for product "Websphere Application Server" and version "8.0.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.0.0.1 Search vendor "Ibm" for product "Websphere Application Server" and version "8.0.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.0.0.2 Search vendor "Ibm" for product "Websphere Application Server" and version "8.0.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.0.0.3 Search vendor "Ibm" for product "Websphere Application Server" and version "8.0.0.3" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.0.0.4 Search vendor "Ibm" for product "Websphere Application Server" and version "8.0.0.4" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Websphere Application Server Search vendor "Ibm" for product "Websphere Application Server" | 8.5.0.0 Search vendor "Ibm" for product "Websphere Application Server" and version "8.5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Z\/os Search vendor "Ibm" for product "Z\/os" | - | - |
Safe
|