CVE-2012-5938

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 - Unprotected File Access via Incorrect Permissions

Title source: llm
STIX 2.1

Description

The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80493
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21628844

Scores

EPSS 0.0039
EPSS Percentile 32.1%

Details

CWE
CWE-264
Status published
Products (4)
ibm/infosphere_information_server 8.1
ibm/infosphere_information_server 8.5
ibm/infosphere_information_server 8.7
ibm/infosphere_information_server 9.1
Published Mar 20, 2013
Tracked Since Feb 18, 2026