critical9.0
CVE-2012-5759
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrat…
Impact
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Datapower Xc10 Appliance | Versions 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.0.3, 2.1.0.0, 2.1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/87620
- http://secunia.com/advisories/51319
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC85748
- http://www-01.ibm.com/support/docview.wss?uid=swg21615783
- http://www-01.ibm.com/support/docview.wss?uid=swg24033740
- http://www.securityfocus.com/bid/56617
- http://www.securitytracker.com/id?1027798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80062
- http://osvdb.org/87620
- http://secunia.com/advisories/51319
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC85748
- http://www-01.ibm.com/support/docview.wss?uid=swg21615783
- http://www-01.ibm.com/support/docview.wss?uid=swg24033740
- http://www.securityfocus.com/bid/56617
- http://www.securitytracker.com/id?1027798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80062