Lucene search

K
nvd[email protected]NVD:CVE-2013-6719
HistoryMar 06, 2014 - 11:55 a.m.

CVE-2013-6719

2014-03-0611:55:05
CWE-78
web.nvd.nist.gov
5

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.632

Percentile

97.9%

delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the testconn_host parameter.

Affected configurations

NVD
Node
ibmtealeaf_cxMatch7.1
OR
ibmtealeaf_cxMatch7.2
OR
ibmtealeaf_cxMatch8.0
OR
ibmtealeaf_cxMatch8.1
OR
ibmtealeaf_cxMatch8.2
OR
ibmtealeaf_cxMatch8.3
OR
ibmtealeaf_cxMatch8.4
OR
ibmtealeaf_cxMatch8.5
OR
ibmtealeaf_cxMatch8.6
OR
ibmtealeaf_cxMatch8.7
OR
ibmtealeaf_cxMatch8.8

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.632

Percentile

97.9%