VULNERABILITY INTELLIGENCE
CVE-2012-3311
CVSS score3.3 LOW
EPSS probability0.36%
CISA KEVNot currently listed
Published2012-09-25
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:N
Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.