PT-2013-5994 · Ibm · Ibm Websphere Portal

Publicado 2013-12-22 · Atualizado 2017-08-29 · CVE-2013-6316

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF25 IBM WebSphere Portal versions 8.0.0.x through 8.0.0.0 CF08

Description The issue arises from improper handling of content-selection changes during Taxonomy component rendering. This allows remote attackers to obtain sensitive property information by leveraging an error in a Web Content Manager (WCM) context processor.

Recommendations For IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF25, update to version 7.0.0.2 CF26 or later. For IBM WebSphere Portal versions 8.0.0.x through 8.0.0.0 CF08, update to version 8.0.0.1 CF09 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6316

Produtos afetados

Ibm Websphere Portal

Referências · 7

• http://securityfocus.com/bid/64492 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21660011 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6316 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6316 · Nota de Segurança
• http://osvdb.org/101270 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88597 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI04897 · Aviso do Fabricante