PT-2013-4811 · Ibm · Ibm Spss Collaboration/Deployment Services

Publicado 2013-12-21 · Atualizado 2017-08-29 · CVE-2013-4044

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 and version 5.0 before FP3

Description The issue allows remote authenticated users to read application log files via a direct HTTP request.

Recommendations For versions 4.2.1 through 4.2.1.3 IF2, update to version 4.2.1.3 IF3. For version 5.0 before FP3, update to version 5.0 FP3.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-4044

Produtos afetados

Ibm Spss Collaboration/Deployment Services

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/86420 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21660191 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4044 · Nota de Segurança