CVE-2012-3311

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-25 · updated 2026-06-16
Weakness: CWE-264

Description

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors.

Affected products

IBM WebSphere Application Server: 6.1.0, 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4 (+45)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388
http://www.ibm.com/support/docview.wss?uid=swg21611313
http://www.securityfocus.com/bid/55671
https://exchange.xforce.ibmcloud.com/vulnerabilities/77697
http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388
http://www.ibm.com/support/docview.wss?uid=swg21611313
http://www.securityfocus.com/bid/55671
https://exchange.xforce.ibmcloud.com/vulnerabilities/77697

Get alerted when CVE-2012-3311 or the next vulnerability affects your stack