PT-2013-5994 · Ibm · Ibm Websphere Portal

Published 2013-12-22 · Updated 2017-08-29 · CVE-2013-6316

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF25 IBM WebSphere Portal versions 8.0.0.x through 8.0.0.0 CF08

Description The issue arises from improper handling of content-selection changes during Taxonomy component rendering. This allows remote attackers to obtain sensitive property information by leveraging an error in a Web Content Manager (WCM) context processor.

Recommendations For IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF25, update to version 7.0.0.2 CF26 or later. For IBM WebSphere Portal versions 8.0.0.x through 8.0.0.0 CF08, update to version 8.0.0.1 CF09 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6316

Affected Products

Ibm Websphere Portal

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21660011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6316 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI04897 · Vendor Advisory
• http://securityfocus.com/bid/64492 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6316 · Note
• http://osvdb.org/101270 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88597 · Note