Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-4832

Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Published

2013-01-31T12:06:18.080

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 1.9 (LOW)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm infosphere_business_glossary 8.1.1 Yes
Application ibm infosphere_business_glossary 8.1.2 Yes
Application ibm infosphere_information_server 8.1 Yes
Application ibm infosphere_information_server 8.5 Yes
Application ibm infosphere_information_server 8.5.0.1 Yes
Application ibm infosphere_information_server 8.5.0.2 Yes
Application ibm infosphere_information_server 8.7 Yes
References