PT-2014-3183 · Ibm · Ibm Websphere Extreme Scale Client

Published 2014-02-22 · Updated 2017-08-29 · CVE-2013-6734

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale Client versions 7.1 through 8.6.0.4

Description The issue allows remote authenticated users to obtain sensitive information in certain circumstances by leveraging access to the same web container, due to the improper isolation of cached data of different users.

Recommendations For versions 7.1 through 8.6.0.4, consider implementing additional access controls to the web container to minimize the risk of sensitive information disclosure until a proper fix is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6734

Affected Products

Ibm Websphere Extreme Scale Client

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21664641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6734 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89397 · Note