Unscored severity · published Feb 20, 2013
CVE-2012-3321
IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password
–
CVSS
1.2%
EPSS
No
On KEV
Description
IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Smartcloud Control Desk · Ibm
7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3321
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV25198
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21625624
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77916
More from Smartcloud Control Desk
9.8
CVE-2013-3323
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the…
8.8
CVE-2018-1524
IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system
8.0
CVE-2019-4364
IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system
6.5
CVE-2018-2028
IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive…
5.4
CVE-2019-4429
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting