Lucene search

K
cve[email protected]CVE-2013-5433
HistoryAug 12, 2014 - 12:55 a.m.

CVE-2013-5433

2014-08-1200:55:03
CWE-255
web.nvd.nist.gov
17
cve
2013
5433
ibm
infosphere optim
hardcoded credentials
sensitive information
xml document

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document.

Affected configurations

NVD
Node
ibminfosphere_optim_data_growth_solution_for_siebel_crmMatch3.2
OR
ibminfosphere_optim_data_growth_solution_for_siebel_crmMatch3.2.1
OR
ibminfosphere_optim_data_growth_solution_for_siebel_crmMatch3.2.2
OR
ibminfosphere_optim_data_growth_solution_for_siebel_crmMatch3.2.3
OR
ibminfosphere_optim_data_growth_solution_for_siebel_crmMatch9.1

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

Related for CVE-2013-5433