PT-2013-5516 · Ibm · Ibm Rational Focal Point

Published 2013-12-18 · Updated 2017-08-29 · CVE-2013-5398

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4 through 6.4 before devfix1 IBM Rational Focal Point versions 6.4.1.3 before devfix1 IBM Rational Focal Point versions 6.5.1 before devfix1 IBM Rational Focal Point versions 6.5.2 before devfix4 IBM Rational Focal Point versions 6.5.2.3 before devfix9 IBM Rational Focal Point versions 6.6 before devfix5 IBM Rational Focal Point versions 6.6.0.1 before devfix2 IBM Rational Focal Point version 6.6.1

Description The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Recommendations For IBM Rational Focal Point version 6.4, update to a version that includes devfix1. For IBM Rational Focal Point version 6.4.1.3, update to a version that includes devfix1. For IBM Rational Focal Point version 6.5.1, update to a version that includes devfix1. For IBM Rational Focal Point version 6.5.2, update to a version that includes devfix4. For IBM Rational Focal Point version 6.5.2.3, update to a version that includes devfix9. For IBM Rational Focal Point version 6.6, update to a version that includes devfix5. For IBM Rational Focal Point version 6.6.0.1, update to a version that includes devfix2. For IBM Rational Focal Point version 6.6.1, apply the necessary fix to address the issue.

Fix

Related Identifiers

CVE-2013-5398

ZDI-13-285

Affected Products

Ibm Rational Focal Point

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5398 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-13-285 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21654471 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87294 · Note