Unscored severity · published Nov 23, 2012
CVE-2012-5758
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service (process exit) via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WD
Websphere Datapower Xc10 Appliance · Ibm
2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.1.0.0; 2.1.0.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5758
secunia.com
http://secunia.com/advisories/51319
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86908
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615783
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24033740
www.securityfocus.com
http://www.securityfocus.com/bid/56617
www.securitytracker.com
http://www.securitytracker.com/id?1027798
More from Websphere Datapower Xc10 Appliance
–
CVE-2014-3060
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale…
–
CVE-2014-3059
Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging…
–
CVE-2013-5446
The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors
–
CVE-2013-5428
IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via…
–
CVE-2013-0499
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote…