PT-2013-6101 · Ibm · Ibm Websphere Portal

Published 2013-12-22 · Updated 2017-08-29 · CVE-2013-6723

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal version 8.0.0.1 before CF09

Description The issue is related to the improper handling of references in compute="always" Web Content Manager (WCM) navigator components. This allows remote attackers to obtain sensitive component information via unspecified vectors.

Recommendations For IBM WebSphere Portal version 8.0.0.1, apply Cumulative Fix 09 (CF09) or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6723

Affected Products

Ibm Websphere Portal

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21660011 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI05684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6723 · Security Note
• http://securityfocus.com/bid/64488 · Note
• http://osvdb.org/101271 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89278 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6723 · Note