IBM WebSphere Application Server CVE-2012-4850 Remote Privilege Escalation Vulnerability

Bugtraq ID:	56460
Class:	Design Error
CVE:	CVE-2012-4850
Remote:	Yes
Local:	No
Published:	Nov 07 2012 12:00AM
Updated:	Nov 07 2012 12:00AM
Credit:	IBM
Vulnerable:	IBM WebSphere Application Server for z/OS 8.5 IBM Websphere Application Server for IBM i 8.5 IBM Websphere Application Server 8.5
Not Vulnerable:	IBM WebSphere Application Server for z/OS 8.5.0.1 IBM Websphere Application Server for IBM i 8.5.0.1 IBM Websphere Application Server 8.5.0.1

IBM WebSphere Application Server CVE-2012-4850 Remote Privilege Escalation Vulnerability

IBM WebSphere Application Server is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges within the application and obtain unauthorized access to the sensitive information.

Versions prior to IBM WebSphere Application Server 8.5.0.1 are vulnerable.

IBM WebSphere Application Server CVE-2012-4850 Remote Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server CVE-2012-4850 Remote Privilege Escalation Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM WebSphere Application Server CVE-2012-4850 Remote Privilege Escalation Vulnerability

References:

• IBM Websphere Homepage (IBM)
  
• Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.0.1 (IBM)