Lucene search
HistoryAug 01, 2013 - 1:32 p.m.
CVE-2013-2993
cve-2013-2993
ibm websphere commerce
authentication
vulnerability
remote attackers
web services
7 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user’s active session via unknown vectors.
CPE configuration
ibmwebsphere_commerceMatch6.0.0.1
ORibmwebsphere_commerceMatch6.0.0.2
ORibmwebsphere_commerceMatch6.0.0.3
ORibmwebsphere_commerceMatch6.0.0.4
ORibmwebsphere_commerceMatch6.0.0.5
ORibmwebsphere_commerceMatch6.0.0.6
ORibmwebsphere_commerceMatch6.0.0.7
ORibmwebsphere_commerceMatch6.0.0.8
ORibmwebsphere_commerceMatch6.0.0.9
ORibmwebsphere_commerceMatch6.0.0.10
ORibmwebsphere_commerceMatch6.0.0.11
Related
cvelist
cvelist
CVE-2013-2993
2013-07-31 14:00:00
nvd
nvd
CVE-2013-2993
2013-08-01 13:32:16
prion
prion
Authentication flaw
2013-08-01 13:32:00
7 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
Related for CVE-2013-2993