CVE-2013-5454 in WebSphere Portal

Riassunto

di MITRE

IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 22/08/2013
• Divulgazione: 17/11/2013
• Moderazione: accettato
• Voce: VDB-11177
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.01803
• KEV: no
• Attività: molto basso
• Settore: Pharma, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5454
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5454
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5454/