CVE-2012-5759

IBM WebSphere DataPower XC10 Appliance 2.0.0.0-2.0.0.3 and 2.1.0.0-2.1.0.2 - Authenticated JMX Operation Bypass

Title source: llm

Description

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/87620

Various Sources x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg24033740

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/80062

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/56617

Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1IC85748

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027798

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/51319

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21615783

Scores

EPSS 0.0220

EPSS Percentile 80.6%

Details

CWE

CWE-264

Status published

Products (7)

ibm/websphere_datapower_xc10_appliance 2.0.0.0

ibm/websphere_datapower_xc10_appliance 2.0.0.1

ibm/websphere_datapower_xc10_appliance 2.0.0.2

ibm/websphere_datapower_xc10_appliance 2.0.0.3

ibm/websphere_datapower_xc10_appliance 2.1.0.0

ibm/websphere_datapower_xc10_appliance 2.1.0.1

ibm/websphere_datapower_xc10_appliance 2.1.0.2

Published Nov 23, 2012

Tracked Since Feb 18, 2026