« Volver al listado

CVE-2012-3312

Estado: ModificadaMedia (5)—

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Infosphere Guardium

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3312",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-08-29T22:55:01.550",
  "references": [
    {
      "url": "http://en.securitylab.ru/lab/",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://en.securitylab.ru/lab/PT-2012-15",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21609224",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77785",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://en.securitylab.ru/lab/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://en.securitylab.ru/lab/PT-2012-15",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21609224",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77785",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
    },
    {
      "lang": "es",
      "value": "El editor datasource definition en IBM InfoSphere Guardium v8.2 y anteriores, cuando la configuración de save-password es activada, transmite credenciales de la base de datos en texto en claro, lo que permite a atacantes remotos obtener información sensible si espía la red."
    }
  ],
  "lastModified": "2026-06-16T23:42:58.513",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2C86BA8-DF2C-4C22-8027-624B0C693857",
              "versionEndIncluding": "8.2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "547139EB-DC1D-4488-A930-F6EB1631279A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ED23367-8D35-420C-8F59-184764644FB2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}