EUVD-2013-5238

Malware in sbrugna...

IBM Rational Focal Point Login Servlet Information Disclosure (CVE-2013-5397)

An information disclosure vulnerability has been reported in IBM Rational Focal Point. The vulnerability is due to an input validation error of the file variable in com.telelogic.focalpoint.pres.controller.LoginController servlet. A remote, unauthenticated attacker could exploit this vulnerabilit...

CVE-2013-5397

CVE-2013-5397 covers an information-disclosure vulnerability in IBM Rational Focal Point’s Webservice Axis Gateway. The issue affects multiple versions (6.4 to 6.6.x with various devfix exclusions) and is described as allowing remote attackers to bypass access restrictions and obtain sensitive in...

CVE-2013-5397

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...