Lucene search

K
cve[email protected]CVE-2013-2953
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2953

2022-10-0316:15:00
CWE-310
web.nvd.nist.gov
22
ibm
infosphere
optim data growth
oracle
e-business suite
ssl
md5
x.509
certificate
cve-2013-2953
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.1%

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

Affected configurations

NVD
Node
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.2
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.3.3
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.4.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.4.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.5.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch6.5.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.1.2
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.2.2
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.3.0
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch7.3.1
OR
ibminfosphere_optim_data_growth_for_oracle_e-business_suiteMatch9.1.0

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.1%

Related for CVE-2013-2953