NVD

Id
44938  
Name
CVE-2012-3325  
Description
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-30  
Modified Date
2013-10-10  
Seq
2012-3325  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225142 44938 CVE-2012-3325 PM71296  View
225143 44938 CVE-2012-3325 http://www.ibm.com/support/docview.wss?uid=swg21609067  View
225144 44938 CVE-2012-3325 55309  View
225145 44938 CVE-2012-3325 1027462  View
225146 44938 CVE-2012-3325 was-pm44303-security-bypass(77959)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28308 JVNDB-2012-004015 IBM WebSphere Application Server における管理者のアクセス権限を取得される脆弱性 IBM WebSphere Application Server (WAS) は、PM44303 fix がインストールされている場合、認証情報を適切に検証しないため、管理者のアクセス権限を取得される脆弱性が存在します。 CVE-2012-3325 56563 CVE-2012-3325 44938 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004015.html 2012-08-30 2012-09-03 View