CVE-2013-4012

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive PAA file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Code injection

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive PAA file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2013-4012

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09 is vulnerable when Content Template Catalog 4.0 is used. The issue allows remote authenticated users to install Portal Application Archive (PAA) files without administrative privileges, potentially modifying data or causing a denial of service via ...