PT-2013-6103 · Ibm · Ibm Websphere Portal
Publicado
2013-12-22
·
Atualizado
2018-10-09
·
CVE-2013-6735
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Portal versions 6.0.0.x through 6.0.0.1
IBM WebSphere Portal versions 6.0.1.x through 6.0.1.7
IBM WebSphere Portal versions 6.1.0.x through 6.1.0.6 CF27
IBM WebSphere Portal versions 6.1.5.x through 6.1.5.3 CF27
IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF26
IBM WebSphere Portal versions 8.0.0.x through 8.0.0.1 CF08
Description
The issue allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.
Recommendations
For versions 6.0.0.x through 6.0.0.1, update to a version outside of this range.
For versions 6.0.1.x through 6.0.1.7, update to a version outside of this range.
For versions 6.1.0.x through 6.1.0.6 CF27, update to a version outside of this range.
For versions 6.1.5.x through 6.1.5.3 CF27, update to a version outside of this range.
For versions 7.0.0.x through 7.0.0.2 CF26, update to a version outside of this range.
For versions 8.0.0.x through 8.0.0.1 CF08, update to a version outside of this range.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Websphere Portal