CVE-2012-0204 Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 befor...
HighCVSS 9.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm infosphere import export manager | = 8.1 | No fix listed |
| ibm infosphere import export manager | = 8.1.1 | No fix listed |
| ibm infosphere import export manager | = 8.1.2 | No fix listed |
| ibm infosphere import export manager | = 8.5 | No fix listed |
| ibm infosphere import export manager | = 8.7 | No fix listed |
| ibm infosphere import export manager | = 9.1 | No fix listed |
| ibm infosphere information server | = 8.1 | No fix listed |
| ibm infosphere information server | = 8.5 | No fix listed |
| ibm infosphere information server | = 8.5.0.1 | No fix listed |
| ibm infosphere information server | = 8.5.0.2 | No fix listed |
| ibm infosphere information server | = 8.7 | No fix listed |
| ibm infosphere information server | = 9.1 | No fix listed |
| ibm infosphere information server metabrokers bridges | All versions | No fix listed |
References
- www-01.ibm.com vendor-advisory
- infosphere-is-dll-code-execution(73255) vdb-entry