VULNERABILITY INTELLIGENCE
CVE-2012-4818
CVSS score6.5 MEDIUM
EPSS probability1.40%
CISA KEVNot currently listed
Published2022-09-29
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@us.ibm.com — VDB Entry, Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory