PT-2013-4829 · Ibm · Ibm Infosphere Information Server

Published 2013-10-02 · Updated 2017-08-29 · CVE-2013-4067

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1

Description The issue allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.

Recommendations For versions 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1, update to a version that includes the fix for this issue to prevent session hijacking and credential capture.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4067

Affected Products

Ibm Infosphere Information Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-4067 · Security Note
• http://ibm.com/support/docview.wss?uid=swg21651343 · Vendor Advisory
• http://securityfocus.com/bid/62768 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86598 · Note