CVE-2011-3391

{"id": "CVE-2011-3391", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-09-08T18:55:05.707", "references": [{"url": "http://secunia.com/advisories/45871", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1026004", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1PM38058", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/74831", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/49407", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69522", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/45871", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1026004", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1PM38058", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/74831", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/49407", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69522", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu."}, {"lang": "es", "value": "IBM Rational Build Forge v7.1.2 se basa en el c\u00f3digo JavaScript del lado cliente para hacer cumplir el requisito de permiso EditSecurity para la funci\u00f3n Export Key File, lo que permite a usuarios autenticados remotamente leer un archivo de clave mediante la eliminaci\u00f3n de un atributo de desactivacion en el sub-men\u00fa Seguridad."}], "lastModified": "2024-11-21T01:30:25.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:rational_build_forge:7.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E153397-07D9-44E1-88D8-7C9565277CC2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}