6.8

CVE-2012-3306

EPSS 1.61%
Veröffentlicht 25.09.2012 20:55:01
Zuletzt bearbeitet 16.06.2026 23:42:57
Erkennungen
Login

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 51 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version 6.1.0

Ibm ≫ Websphere Application Server Version 6.1.0.0

Ibm ≫ Websphere Application Server Version 6.1.0.1

Ibm ≫ Websphere Application Server Version 6.1.0.2

Ibm ≫ Websphere Application Server Version 6.1.0.3

Ibm ≫ Websphere Application Server Version 6.1.0.4

Ibm ≫ Websphere Application Server Version 6.1.0.5

Ibm ≫ Websphere Application Server Version 6.1.0.7

Ibm ≫ Websphere Application Server Version 6.1.0.9

Ibm ≫ Websphere Application Server Version 6.1.0.11

Ibm ≫ Websphere Application Server Version 6.1.0.12

Ibm ≫ Websphere Application Server Version 6.1.0.15

Ibm ≫ Websphere Application Server Version 6.1.0.17

Ibm ≫ Websphere Application Server Version 6.1.0.19

Ibm ≫ Websphere Application Server Version 6.1.0.21

Ibm ≫ Websphere Application Server Version 6.1.0.23

Ibm ≫ Websphere Application Server Version 6.1.0.25

Ibm ≫ Websphere Application Server Version 6.1.0.27

Ibm ≫ Websphere Application Server Version 6.1.0.29

Ibm ≫ Websphere Application Server Version 6.1.0.31

Ibm ≫ Websphere Application Server Version 6.1.0.33

Ibm ≫ Websphere Application Server Version 6.1.0.35

Ibm ≫ Websphere Application Server Version 6.1.0.37

Ibm ≫ Websphere Application Server Version 6.1.0.39

Ibm ≫ Websphere Application Server Version 6.1.0.41

Ibm ≫ Websphere Application Server Version 6.1.0.43

Ibm ≫ Websphere Application Server Version 7.0.0.1

Ibm ≫ Websphere Application Server Version 7.0.0.2

Ibm ≫ Websphere Application Server Version 7.0.0.3

Ibm ≫ Websphere Application Server Version 7.0.0.4

Ibm ≫ Websphere Application Server Version 7.0.0.5

Ibm ≫ Websphere Application Server Version 7.0.0.6

Ibm ≫ Websphere Application Server Version 7.0.0.7

Ibm ≫ Websphere Application Server Version 7.0.0.8

Ibm ≫ Websphere Application Server Version 7.0.0.9

Ibm ≫ Websphere Application Server Version 7.0.0.10

Ibm ≫ Websphere Application Server Version 7.0.0.11

Ibm ≫ Websphere Application Server Version 7.0.0.13

Ibm ≫ Websphere Application Server Version 7.0.0.14

Ibm ≫ Websphere Application Server Version 7.0.0.15

Ibm ≫ Websphere Application Server Version 7.0.0.16

Ibm ≫ Websphere Application Server Version 7.0.0.17

Ibm ≫ Websphere Application Server Version 7.0.0.19

Ibm ≫ Websphere Application Server Version 7.0.0.21

Ibm ≫ Websphere Application Server Version 7.0.0.23

Ibm ≫ Websphere Application Server Version 8.0.0.0

Ibm ≫ Websphere Application Server Version 8.0.0.1

Ibm ≫ Websphere Application Server Version 8.0.0.2

Ibm ≫ Websphere Application Server Version 8.0.0.3

Ibm ≫ Websphere Application Server Version 8.0.0.4

Ibm ≫ Websphere Application Server Version 8.5.0.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.61%	0.728

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.ibm.com/support/docview.wss?uid=swg21611313

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1PM66514

https://exchange.xforce.ibmcloud.com/vulnerabilities/77478

https://nvd.nist.gov/vuln/detail/CVE-2012-3306

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3306

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3306

EUVD