CVE-2012-0731

Loading...

General

Score:6.8/10.0
Severity:Medium
Category:Information Leak / Disclosure
Exploit:Available

Impact Metrics

Confidentiality:Complete
Integrity:None
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:Single

Published on 03/05/12 - Updated on 29/08/17

Description

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors.

Category: Information Leak / Disclosure

CWE-200 (Information Exposure)
An information exposure is the intentional or unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information.

Security Notices

US National Vulnerability DatabaseCVE-2012-0731
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2012-AVI-233

Exploits

SecurityFocusBID-53247

Relative technologies

VendorProduct
ibmrational_appscan

Share this vulnerability with:

Twitter Facebook LinkedIn Mail