CVE-2012-3311

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.

Score
CVSS 2.0 3.3 Low
Status
Modified - psirt@us.ibm.com
Published
2012-09-25
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References