CVE-2012-0705 Command injection in n/a
Remote authenticated users can execute arbitrary commands due to improper input validation in InfoSphere Import Export Manager.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-0705?
CVE-2012-0705 is a high-severity command injection vulnerability in Ibm Infosphere Information Server, published on 31 Jan 2013. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 does not validate unspecified input data, which allows remote authenticated users to execute arbitrary commands via unknown vectors.
Weakness: CWE-20
Which versions are affected by CVE-2012-0705?
It affects 2 products.
Products include Ibm Infosphere Information Server, Ibm Infosphere Information Server Metabrokers \& Bridges.
How do I fix CVE-2012-0705?
No fix has been published for CVE-2012-0705 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2012-0705 being exploited?
There is no known exploitation of CVE-2012-0705 in the wild and no public exploit code.
Other vulnerabilities in Ibm Infosphere Information Server
Sources
Also known as GHSA-fpfq-2jvw-r57h.