PT-2013-4059 · Ibm · Ibm Infosphere Optim Data Growth For Oracle E-Business Suite

Published 2013-05-27 · Updated 2017-08-29 · CVE-2013-2954

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3

Description The issue allows remote attackers to gain access via a brute-force attack due to the lack of limitation on incorrect authentication attempts on the login page in the Console.

Recommendations For versions 6.x through 9.x before 9.1.0.3, update to version 9.1.0.3 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-2954

Affected Products

Ibm Infosphere Optim Data Growth For Oracle E-Business Suite

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2954 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21637444 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83663 · Note