PT-2013-4829 · Ibm · Ibm Infosphere Information Server

Publicado 2013-10-02 · Atualizado 2017-08-29 · CVE-2013-4067

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1

Description The issue allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.

Recommendations For versions 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1, update to a version that includes the fix for this issue to prevent session hijacking and credential capture.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4067

Produtos afetados

Ibm Infosphere Information Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-4067 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg21651343 · Aviso do Fabricante
• http://securityfocus.com/bid/62768 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86598 · Nota