Login Request a demo
Unscored severity · published Dec 5, 2012
CVE-2012-3317
IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Websphere Message Broker · Ibm
6.1; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +12 more · source: NVD
Affected product
WM
Websphere Message Broker
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3317
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3317
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IC85477
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21611401
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77818
More from Websphere Message Broker
9.1
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when…
6.1
CVE-2016-9010
IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim
5.5
CVE-2017-1418
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files
5.5
CVE-2017-1207
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user
5.3
CVE-2018-1801
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker…