PT-2014-3183 · Ibm · Ibm Websphere Extreme Scale Client

Publicado 2014-02-22 · Atualizado 2017-08-29 · CVE-2013-6734

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale Client versions 7.1 through 8.6.0.4

Description The issue allows remote authenticated users to obtain sensitive information in certain circumstances by leveraging access to the same web container, due to the improper isolation of cached data of different users.

Recommendations For versions 7.1 through 8.6.0.4, consider implementing additional access controls to the web container to minimize the risk of sensitive information disclosure until a proper fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6734

Produtos afetados

Ibm Websphere Extreme Scale Client

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21664641 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-6734 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89397 · Nota