Lucene search

K
cve[email protected]CVE-2013-6719
HistoryMar 06, 2014 - 11:55 a.m.

CVE-2013-6719

2014-03-0611:55:05
CWE-78
web.nvd.nist.gov
39
cve-2013-6719
ibm tealeaf
cx
remote execution
authenticated users
shell metacharacters
web console
security vulnerability

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.632 Medium

EPSS

Percentile

97.9%

delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the testconn_host parameter.

Affected configurations

NVD
Node
ibmtealeaf_cxMatch7.1
OR
ibmtealeaf_cxMatch7.2
OR
ibmtealeaf_cxMatch8.0
OR
ibmtealeaf_cxMatch8.1
OR
ibmtealeaf_cxMatch8.2
OR
ibmtealeaf_cxMatch8.3
OR
ibmtealeaf_cxMatch8.4
OR
ibmtealeaf_cxMatch8.5
OR
ibmtealeaf_cxMatch8.6
OR
ibmtealeaf_cxMatch8.7
OR
ibmtealeaf_cxMatch8.8

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.632 Medium

EPSS

Percentile

97.9%