PT-2013-5516 · Ibm · Ibm Rational Focal Point

Publicado 2013-12-18 · Atualizado 2017-08-29 · CVE-2013-5398

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4 through 6.4 before devfix1 IBM Rational Focal Point versions 6.4.1.3 before devfix1 IBM Rational Focal Point versions 6.5.1 before devfix1 IBM Rational Focal Point versions 6.5.2 before devfix4 IBM Rational Focal Point versions 6.5.2.3 before devfix9 IBM Rational Focal Point versions 6.6 before devfix5 IBM Rational Focal Point versions 6.6.0.1 before devfix2 IBM Rational Focal Point version 6.6.1

Description The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Recommendations For IBM Rational Focal Point version 6.4, update to a version that includes devfix1. For IBM Rational Focal Point version 6.4.1.3, update to a version that includes devfix1. For IBM Rational Focal Point version 6.5.1, update to a version that includes devfix1. For IBM Rational Focal Point version 6.5.2, update to a version that includes devfix4. For IBM Rational Focal Point version 6.5.2.3, update to a version that includes devfix9. For IBM Rational Focal Point version 6.6, update to a version that includes devfix5. For IBM Rational Focal Point version 6.6.0.1, update to a version that includes devfix2. For IBM Rational Focal Point version 6.6.1, apply the necessary fix to address the issue.

Correção

Identificadores relacionados

CVE-2013-5398

ZDI-13-285

Produtos afetados

Ibm Rational Focal Point

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5398 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-13-285 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87294 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21654471 · Aviso do Fabricante