« Volver al listado

CVE-2012-0430

Estado: ModificadaMedia (6.4)—

Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Edirectory

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0430",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-25T12:13:04.160",
  "references": [
    {
      "url": "http://www.novell.com/support/kb/doc.php?id=3426981",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/support/kb/doc.php?id=7011538",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1027910",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=772898",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/support/kb/doc.php?id=3426981",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/support/kb/doc.php?id=7011538",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027910",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=772898",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad no especificada en NetIQ eDirectory v8.8.6.x antes de v8.8.6.7 y v8.8.7.x antes de v8.8.7.2 en Windows permite a atacantes remotos obtener una cookie de administrador y omitir las comprobaciones de autorización a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:37:15.497",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.0:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3D3D42E-DDAB-44F0-85A4-A3953CB0EF1C"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.1:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21A19AA6-90CB-4867-8F40-20F45A38310E"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.2:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CC85421-00FF-4359-9543-BB11D099AC9A"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.3:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "125E1837-0475-43DD-B3E8-42090CE7F2B4"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.4:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46D6A35B-5324-48D6-AEF4-436E0D6CD3BD"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.5:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33AAFD38-E68F-4A26-8469-6A9AA8C927F6"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.6.6:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D005DC1-31D2-43B2-9B72-0FD9C42C0215"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.7.0:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE700759-5AFC-4584-9DBD-83D41BEDC85A"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:edirectory:8.8.7.1:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAE7E3C6-08E8-45D7-8F3F-2173C3A1D1B5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}