PT-2013-5515 · Ibm · Ibm Rational Focal Point

Publicado 2013-12-18 · Atualizado 2017-08-29 · CVE-2013-5397

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4 through 6.4 before devfix1 IBM Rational Focal Point versions 6.4.1.3 before devfix1 IBM Rational Focal Point versions 6.5.1 before devfix1 IBM Rational Focal Point versions 6.5.2 before devfix4 IBM Rational Focal Point versions 6.5.2.3 before devfix9 IBM Rational Focal Point versions 6.6 before devfix5 IBM Rational Focal Point versions 6.6.0.1 before devfix2 IBM Rational Focal Point version 6.6.1

Description The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Recommendations For IBM Rational Focal Point version 6.4, update to devfix1 or later. For IBM Rational Focal Point version 6.4.1.3, update to devfix1 or later. For IBM Rational Focal Point version 6.5.1, update to devfix1 or later. For IBM Rational Focal Point version 6.5.2, update to devfix4 or later. For IBM Rational Focal Point version 6.5.2.3, update to devfix9 or later. For IBM Rational Focal Point version 6.6, update to devfix5 or later. For IBM Rational Focal Point version 6.6.0.1, update to devfix2 or later. For IBM Rational Focal Point version 6.6.1, update to a version that includes the fix for this issue.

Correção

Identificadores relacionados

CVE-2013-5397

ZDI-13-284

Produtos afetados

Ibm Rational Focal Point

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/87293 · Nota
• https://zerodayinitiative.com/advisories/ZDI-13-284 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-5397 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21654471 · Aviso do Fabricante