CVE-2013-2976

2013-08-2121:55:00

CWE-200

[email protected]

web.nvd.nist.gov

ibm

websphere

application server

admin console

caching

vulnerability

cve-2013-2976

nvd

7.5 High

AI Score

Confidence

High

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq8.0.0.5
ibm:websphere_application_serveribm websphere application servereq8.0.0.1
ibm:websphere_application_serveribm websphere application servereq8.0.0.4
ibm:websphere_application_serveribm websphere application servereq8.0.0.2
ibm:websphere_application_serveribm websphere application servereq8.0.0.0
ibm:websphere_application_serveribm websphere application servereq8.0.0.3
ibm:websphere_application_serveribm websphere application servereq8.0.0.6
ibm:websphere_application_serveribm websphere application servereq6.1.0.21
ibm:websphere_application_serveribm websphere application servereq6.1.0.31
ibm:websphere_application_serveribm websphere application servereq6.1.7

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.5
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.1
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.4
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.2
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.0
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.3
ibm:websphere_application_server	ibm websphere application server	eq	8.0.0.6
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.21
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.31
ibm:websphere_application_server	ibm websphere application server	eq	6.1.7