Lucene search

K
cve[email protected]CVE-2013-5398
HistoryDec 18, 2013 - 4:04 p.m.

CVE-2013-5398

2013-12-1816:04:33
web.nvd.nist.gov
100
cve
ibm
rational focal point
webservice axis gateway
vulnerability
information disclosure

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.959 High

EPSS

Percentile

99.5%

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5397.

Affected configurations

NVD
Node
ibmrational_focal_pointMatch6.4
OR
ibmrational_focal_pointMatch6.4.1.3
OR
ibmrational_focal_pointMatch6.5.1
OR
ibmrational_focal_pointMatch6.5.2
OR
ibmrational_focal_pointMatch6.5.2.3
OR
ibmrational_focal_pointMatch6.6
OR
ibmrational_focal_pointMatch6.6.0.1
OR
ibmrational_focal_pointMatch6.6.1

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.959 High

EPSS

Percentile

99.5%