What is the CVSS score of CVE-2012-0700?

CVE-2012-0700 has a CVSS 2.0 base score of 1.9 (Low). CVSS vector: AV:L/AC:M/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.0%.

Infosphere Fasttrack CVE-2012-0700

LOW

Credentials Management Errors (CWE-255)

2013-01-31 psirt@us.ibm.com

IBM Authentication Bypass Infosphere Fasttrack Infosphere Information Server

1.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

AV:L/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Local

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Jan 31, 2013 - 12:06 cve.org

LOW 1.9

DescriptionCVE.org

The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-255. The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended access restrictions via unspecified vectors. Affected products include: Ibm Infosphere Fasttrack, Ibm Infosphere Information Server. Version information: through 8.7.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.