CVE-2012-3317

MEDIUM · CVSS 6.9 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-12-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-3317

Severity

MEDIUM

CVSS

6.9

EPSS

0.37%

Java

Original Filing — NVD Description

IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300.