Lucene search

K
cve[email protected]CVE-2013-5397
HistoryDec 18, 2013 - 4:04 p.m.

CVE-2013-5397

2013-12-1816:04:33
web.nvd.nist.gov
94
cve-2013-5397
webservice axis gateway
ibm rational focal point
remote attackers
information disclosure

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.959 High

EPSS

Percentile

99.5%

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5398.

Affected configurations

NVD
Node
ibmrational_focal_pointMatch6.4
OR
ibmrational_focal_pointMatch6.4.1.3
OR
ibmrational_focal_pointMatch6.5.1
OR
ibmrational_focal_pointMatch6.5.2
OR
ibmrational_focal_pointMatch6.5.2.3
OR
ibmrational_focal_pointMatch6.6
OR
ibmrational_focal_pointMatch6.6.0.1
OR
ibmrational_focal_pointMatch6.6.1

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.959 High

EPSS

Percentile

99.5%