« Volver al listado

CVE-2012-0733

Estado: ModificadaMedia (6)—

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Rational Appscan

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0733",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-05-03T04:08:24.907",
  "references": [
    {
      "url": "http://secunia.com/advisories/48967",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/48968",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21592188",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/53247",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74374",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/48967",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48968",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21592188",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/53247",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74374",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account."
    },
    {
      "lang": "es",
      "value": "IBM Rational AppScan Enterprise v5.x y v8.x antes de v8.5.0.1, cuando se utiliza la autenticación integrada de Windows, permite a usuarios autenticados remotamente obtener privilegios de administrador mediante el secuestro de una sesión asociada a la cuenta de servicio."
    }
  ],
  "lastModified": "2026-06-16T23:38:09.517",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.2:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F6C993A-E8D2-4A1A-B213-A646A22AB828"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.4:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF4D0A6B-00D5-4EE4-9892-DE6D3A850933"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.5.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63FCC737-6E6A-4121-B3F4-AF3EF858828E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.5.0.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F08A6FD-4CE9-451D-AABA-7F6B0B9E8473"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.5.0.2:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED2603F1-AA5C-4CCA-A4E7-B53661864CFB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.6.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DF3FEA0-54A6-4656-97FD-4B2277D746C4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:5.6.0.3:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FAE6600-20B1-4D3A-9175-59627023FD20"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A18637C2-F969-4921-A5DA-6061128BE4F3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B2A5D4E-7F19-4DB2-A3C5-D36D69B1FDA8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B98CA70-BB15-4AE9-8FC9-2A677BCB4078"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.0.3:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "024BA3CD-E8C6-4E12-81AD-7654C4547EA1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "479C7BEF-A159-4EDB-A27E-3641B66C88CC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.0.1.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56802963-FBC8-4DC4-BEB6-463F99DC13A1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.5.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D11DF7E-F8F9-412A-A70B-04200D393FDC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_appscan:8.5.0.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE03CD35-7B5E-4B59-8A16-137A18486D0B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}