Lucene search

[email protected]CVE-2013-5430

HistoryOct 28, 2013 - 3:42 a.m.

CVE-2013-5430

2013-10-2803:42:29

CWE-255

[email protected]

web.nvd.nist.gov

cve-2013-5430

ibm

security

appscan

enterprise

default credentials

vulnerability

nvd

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.5%

JSON

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.

Affected configurations

NVD

Node

ibmsecurity_appscanMatch8.0.0.0-enterprise

ibmsecurity_appscanMatch8.0.0.1-enterprise

ibmsecurity_appscanMatch8.0.0.2-enterprise

ibmsecurity_appscanMatch8.0.1.0-enterprise

ibmsecurity_appscanMatch8.0.1.1-enterprise

ibmsecurity_appscanMatch8.0.11-enterprise

ibmsecurity_appscanMatch8.5.0.0-enterprise

ibmsecurity_appscanMatch8.5.0.1-enterprise

ibmsecurity_appscanMatch8.6.0.0-enterprise

ibmsecurity_appscanMatch8.6.0.1-enterprise

ibmsecurity_appscanMatch8.6.0.2-enterprise

ibmsecurity_appscanMatch8.7.0.0-enterprise

ibmsecurity_appscanMatch8.7.0.1-enterprise

CPENameOperatorVersion
ibm:security_appscanibm security appscaneq8.0.0.0
ibm:security_appscanibm security appscaneq8.0.0.1
ibm:security_appscanibm security appscaneq8.0.0.2
ibm:security_appscanibm security appscaneq8.0.1.0
ibm:security_appscanibm security appscaneq8.0.1.1
ibm:security_appscanibm security appscaneq8.0.11
ibm:security_appscanibm security appscaneq8.5.0.0
ibm:security_appscanibm security appscaneq8.5.0.1
ibm:security_appscanibm security appscaneq8.6.0.0
ibm:security_appscanibm security appscaneq8.6.0.1

CPE	Name	Operator	Version
ibm:security_appscan	ibm security appscan	eq	8.0.0.0
ibm:security_appscan	ibm security appscan	eq	8.0.0.1
ibm:security_appscan	ibm security appscan	eq	8.0.0.2
ibm:security_appscan	ibm security appscan	eq	8.0.1.0
ibm:security_appscan	ibm security appscan	eq	8.0.1.1
ibm:security_appscan	ibm security appscan	eq	8.0.11
ibm:security_appscan	ibm security appscan	eq	8.5.0.0
ibm:security_appscan	ibm security appscan	eq	8.5.0.1
ibm:security_appscan	ibm security appscan	eq	8.6.0.0
ibm:security_appscan	ibm security appscan	eq	8.6.0.1

Rows per page:

1-10 of 131

References

www-01.ibm.com/support/docview.wss?uid=swg21653287

exchange.xforce.ibmcloud.com/vulnerabilities/87562

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.5%

JSON

Related for CVE-2013-5430

cvelist1 nvd1 prion1