PT-2013-2364 · Ibm · Ibm Netezza Performance Portal

Publicado 2013-04-05 · Atualizado 2017-08-29 · CVE-2013-0470

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Netezza Performance Portal version 1.0.2

Description The issue allows remote authenticated users to list application directories containing asset files by making a direct request to a directory URI. For example, this could be used to list image files.

Recommendations For IBM Netezza Performance Portal version 1.0.2, consider restricting access to directory URIs to prevent unauthorized listing of application directories.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2013-0470

Produtos afetados

Ibm Netezza Performance Portal

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0470 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81336 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21631945 · Aviso do Fabricante