CVE-2013-6329

2013-12-1715:21:00

CWE-310

[email protected]

web.nvd.nist.gov

ibm

gskit

content manager ondemand

cve-2013-6329

security

denial of service

8.6 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.015 Low

EPSS

Percentile

86.9%

JSON

IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.

CPENameOperatorVersion
ibm:security_access_manager_for_webibm security access manager for webeq6.1
ibm:content_manager_ondemand_for_multiplatformsibm content manager ondemand for multiplatformseq8.5
ibm:security_access_manager_for_webibm security access manager for webeq6.0
ibm:global_security_kitibm global security kiteq-
ibm:security_access_manager_for_webibm security access manager for webeq7.0
ibm:content_manager_ondemand_for_multiplatformsibm content manager ondemand for multiplatformseq9.0
ibm:security_access_manager_for_webibm security access manager for webeq6.1.1

CPE	Name	Operator	Version
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.1
ibm:content_manager_ondemand_for_multiplatforms	ibm content manager ondemand for multiplatforms	eq	8.5
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.0
ibm:global_security_kit	ibm global security kit	eq	-
ibm:security_access_manager_for_web	ibm security access manager for web	eq	7.0
ibm:content_manager_ondemand_for_multiplatforms	ibm content manager ondemand for multiplatforms	eq	9.0
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.1.1