CVE-2013-1615

2022-10-0316:14:48

CWE-200

[email protected]

web.nvd.nist.gov

symantec

ssim

cve-2013-1615

security information manager

vulnerability

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.0%

JSON

The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls.

Affected configurations

NVD

Node

symantecsecurity_information_managerMatch4.7.0

symantecsecurity_information_managerMatch4.7.1

symantecsecurity_information_managerMatch4.7.2

symantecsecurity_information_managerMatch4.7.3

symantecsecurity_information_managerMatch4.7.4

symantecsecurity_information_managerMatch4.8.0

symantecsecurity_information_manager_applianceMatch-

CPENameOperatorVersion
symantec:security_information_managersymantec security information managereq4.7.0
symantec:security_information_managersymantec security information managereq4.7.1
symantec:security_information_managersymantec security information managereq4.7.2
symantec:security_information_managersymantec security information managereq4.7.3
symantec:security_information_managersymantec security information managereq4.7.4
symantec:security_information_managersymantec security information managereq4.8.0
symantec:security_information_manager_appliancesymantec security information manager applianceeq-

CPE	Name	Operator	Version
symantec:security_information_manager	symantec security information manager	eq	4.7.0
symantec:security_information_manager	symantec security information manager	eq	4.7.1
symantec:security_information_manager	symantec security information manager	eq	4.7.2
symantec:security_information_manager	symantec security information manager	eq	4.7.3
symantec:security_information_manager	symantec security information manager	eq	4.7.4
symantec:security_information_manager	symantec security information manager	eq	4.8.0
symantec:security_information_manager_appliance	symantec security information manager appliance	eq	-