Lucene search

[email protected]CVE-2013-0579

HistoryOct 10, 2013 - 10:55 a.m.

CVE-2013-0579

2013-10-1010:55:06

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-0579

ibm

data growth solution

oracle

e-business suite

remote attackers

impersonation

web browser

authentication

4.3 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

JSON

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user’s web browser either (1) before or (2) after authentication.

Affected configurations

NVD

Node

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.2

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.3

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.4.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.4.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.5.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.5.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.2

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.2

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.3.0

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.3.1

ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch9.1.0

CPENameOperatorVersion
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.3.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.3.2
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.3.3
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.4.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.4.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.5.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq6.5.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suiteibm infosphere optim data growth for oracle e-business suiteeq7.1.0

CPE	Name	Operator	Version
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.3.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.3.2
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.3.3
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.4.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.4.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.5.0
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	6.5.1
ibm:infosphere_optim_data_growth_for_oracle_e-business_suite	ibm infosphere optim data growth for oracle e-business suite	eq	7.1.0

Rows per page:

1-10 of 181

References

www-01.ibm.com/support/docview.wss?uid=swg21651990

exchange.xforce.ibmcloud.com/vulnerabilities/83331

4.3 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

JSON

Related for CVE-2013-0579

nvd1 cvelist1 prion1 ibm1