PT-2013-5544 · Ibm · Ibm Websphere Datapower Xc10

Publicado 2013-10-22 · Atualizado 2017-08-29 · CVE-2013-5446

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliances versions 2.1.0 through 2.5.0

Description The issue is related to the console on IBM WebSphere DataPower XC10 appliances, which does not properly process logoff actions. This has an unspecified impact and can be exploited through remote attack vectors.

Recommendations For versions 2.1.0 through 2.5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-5446

Produtos afetados

Ibm Websphere Datapower Xc10

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC93164 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC96617 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5446 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87910 · Nota
• http://ibm.com/support/docview.wss?uid=swg21653546 · Aviso do Fabricante