CVE Feed

    Dashboard / CVE / CVE-2012-0701

    CVE-2012-0701

    The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors.

    Published:Jan 31, 2013
    Last Modified:Apr 11, 2025
    EPS:Jan 31, 2013
    EPSS Score:0.00349
    CVSS Score:6.5

    Affected Products

    Vendor
    Ibm
    Product
    Infosphere Datastage
    Vendor
    Ibm
    Product
    Infosphere Information Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-8982 (CVSS 5.3) — IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information…
    CVE-2016-8999 (CVSS 5.4) — IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attacke…
    CVE-2016-9000 (CVSS 6.1) — IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection…
    CVE-2016-6059 (CVSS 8.1) — IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injec…
    CVE-2015-1900 (CVSS 7.2) — IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to …
    CVE-2011-3123 (CVSS 7.2) — IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 a…
    CVE-2011-3124 (CVSS 7.2) — IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High