PT-2014-3178 · Ibm · Ibm Websphere Dashboard Framework

Publicado 2014-02-14 · Atualizado 2017-08-29 · CVE-2013-6728

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Dashboard Framework versions 6.1.5 through 7.0.1

Description The issue concerns the charting component in IBM WebSphere Dashboard Framework, which has incorrect security constraints for a temporary directory. This allows remote attackers to view or delete image files.

Recommendations For versions 6.1.5 through 7.0.1, consider restricting access to the temporary directory to prevent unauthorized viewing or deletion of image files. As a temporary workaround, restrict access to the charting component until a fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6728

Produtos afetados

Ibm Websphere Dashboard Framework

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21663022 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO78265 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO78266 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89283 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6728 · Nota de Segurança