What is the CVSS score of CVE-2012-0204?

CVE-2012-0204 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.7%.

Infosphere Import Export Manager CVE-2012-0204

CRITICAL

2013-01-31 psirt@us.ibm.com

Information Disclosure IBM Infosphere Import Export Manager Infosphere Information Server Infosphere Information Server Metabrokers Bridges

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jan 31, 2013 - 12:06 cve.org

CRITICAL 9.3

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Affected products include: Ibm Infosphere Import Export Manager, Ibm Infosphere Information Server, Ibm Infosphere Information Server Metabrokers \& Bridges. Version information: through 9.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.