Lucene search

K
cve[email protected]CVE-2013-4070
HistoryDec 21, 2013 - 2:22 p.m.

CVE-2013-4070

2013-12-2114:22:56
CWE-200
web.nvd.nist.gov
16
ibm
spss
collaboration
deployment services
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors.

Affected configurations

NVD
Node
ibmspss_collaboration_and_deployment_servicesMatch4.2.1
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.1
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.2
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.3
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0.1
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

Related for CVE-2013-4070