« Volver al listado

CVE-2012-5951

Estado: ModificadaAlta (7.2)—

Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privileges by leveraging access to the normal Unix System Services (USS) security level.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-5951",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-26T18:55:01.300",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41059",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41060",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41061",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21621163",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027920",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80643",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41059",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41060",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1OA41061",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21621163",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027920",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80643",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privileges by leveraging access to the normal Unix System Services (USS) security level."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad no especificada en IBM Tivoli NetView v1.4, v5.1 a v5.4 y v6.1 en z/OS permite a usuarios locales obtener privilegios aprovechándose de su acceso al nivel de seguridad \"normal\" de Unix System Services (USS).\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:47:37.297",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6C0FA40-0C03-4D70-83C3-B62DFD8B3251"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "559D6C40-BFDB-4C95-9B3B-4A762FDB7D25"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14ABC855-A1DB-4AC9-81C5-43DD998B41CB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC4EE1FB-9DE5-49AA-A483-5A690E6618BB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "839EE158-2C67-4AF8-95F1-828D6D214657"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_netview:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0332BEA8-29D3-4DE1-A905-DFF7271942D1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:z\\/os:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "28A9DB7F-187D-42BA-B271-1C302E529BFB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}