CVE

Id
56554  
CVE No.
CVE-2012-3311  
Status
Candidate  
Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.  
Phase
Assigned (20120607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
585683 56554 CVE-2012-3311 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21611313  View
585684 56554 CVE-2012-3311 AIXAPAR:PM61388  View
585685 56554 CVE-2012-3311 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388  View
585686 56554 CVE-2012-3311 BID:55671  View
585687 56554 CVE-2012-3311 URL:http://www.securityfocus.com/bid/55671  View
585688 56554 CVE-2012-3311 XF:was-cbind-iiop(77697)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30229 JVNDB-2012-005936 複数の IBM 製品の TPAE におけるクロスサイトスクリプティングの脆弱性 複数の IBM 製品の Tivoli Process Automation Engine (TPAE) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3316 56554 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005936.html  View