Lucene search
HistoryDec 07, 2013 - 5:33 a.m.
CVE-2013-5455
ibm
smartcloud
provisioning
security
vulnerability
remote
authenticated
virtual system
deployment
cli command
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.3%
IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command.
Affected configurations
Node
ibmsmartcloud_provisioningMatch2.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:smartcloud_provisioning | ibm smartcloud provisioning | eq | 2.1.0 |
Related
nvd
nvd
CVE-2013-5455
2013-12-07 05:33:32
ibm
ibm
cvelist
cvelist
CVE-2013-5455
2013-12-07 02:00:00
prion
prion
Arbitrary file deletion
2013-12-07 05:33:00
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.3%
Related for CVE-2013-5455