Lucene search

PRIOn knowledge basePRION:CVE-2013-4006

HistoryNov 18, 2013 - 5:23 a.m.

Design/Logic Flaw

2013-11-1805:23:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.9%

JSON

IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.

CPENameOperatorVersion
websphere_application_servereq8.5.0.2 liberty-profile
websphere_application_servereq8.5.5.0 liberty-profile
websphere_application_servereq8.5.0.0 liberty-profile
websphere_application_servereq8.5.0.1 liberty-profile

Name	Operator	Version
websphere_application_server	eq	8.5.0.2 liberty-profile
websphere_application_server	eq	8.5.5.0 liberty-profile
websphere_application_server	eq	8.5.0.0 liberty-profile
websphere_application_server	eq	8.5.0.1 liberty-profile

References

www-01.ibm.com/support/docview.wss?&uid=swg21651880

www-01.ibm.com/support/docview.wss?uid=swg1PM90472

exchange.xforce.ibmcloud.com/vulnerabilities/85273

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.9%

JSON

Related for PRION:CVE-2013-4006