PT-2013-5515 · Ibm · Ibm Rational Focal Point

Published 2013-12-18 · Updated 2017-08-29 · CVE-2013-5397

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4 through 6.4 before devfix1 IBM Rational Focal Point versions 6.4.1.3 before devfix1 IBM Rational Focal Point versions 6.5.1 before devfix1 IBM Rational Focal Point versions 6.5.2 before devfix4 IBM Rational Focal Point versions 6.5.2.3 before devfix9 IBM Rational Focal Point versions 6.6 before devfix5 IBM Rational Focal Point versions 6.6.0.1 before devfix2 IBM Rational Focal Point version 6.6.1

Description The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Recommendations For IBM Rational Focal Point version 6.4, update to devfix1 or later. For IBM Rational Focal Point version 6.4.1.3, update to devfix1 or later. For IBM Rational Focal Point version 6.5.1, update to devfix1 or later. For IBM Rational Focal Point version 6.5.2, update to devfix4 or later. For IBM Rational Focal Point version 6.5.2.3, update to devfix9 or later. For IBM Rational Focal Point version 6.6, update to devfix5 or later. For IBM Rational Focal Point version 6.6.0.1, update to devfix2 or later. For IBM Rational Focal Point version 6.6.1, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2013-5397

ZDI-13-284

Affected Products

Ibm Rational Focal Point

References · 4

• https://zerodayinitiative.com/advisories/ZDI-13-284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-5397 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21654471 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87293 · Note