CVE-2013-3030

The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outage) via crafted HTTP requests.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21652590	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84592
http://www-01.ibm.com/support/docview.wss?uid=swg21652590	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84592

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:::::::*
	cpe:2.3:a:ibm:cognos_business_intelligence:10.1:::::::*
	cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:::::::*
	cpe:2.3:a:ibm:cognos_business_intelligence:10.2:::::::*
	cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:::::::*
	cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:::::::*

History

21 Nov 2024, 01:52

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21652590 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21652590 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/84592 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/84592 -

Information

Published : 2013-11-18 03:55

Updated : 2024-11-21 01:52

NVD link : CVE-2013-3030

Mitre link : CVE-2013-3030

CVE.ORG link : CVE-2013-3030

JSON object : View

Products Affected

ibm

cognos_business_intelligence

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2013-3030", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-11-18T03:55:05.460", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21652590", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84592", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21652590", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84592", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outage) via crafted HTTP requests."}, {"lang": "es", "value": "El servlet de entrada en IBM Cognos Business Intelligence 8.4.1 anterior a la versi\u00f3n IF3, 10.1.0 anterior a IF4, 10.1.1 anterior a la versi\u00f3n IF4, 10.2.0 anterior a IF4, 10.2.1 anterior a la versi\u00f3n IF2, y 10.2.1.1 anterior a IF1 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (corte de puerta de enlace temporal) a trav\u00e9s de peticiones HTTP manipuladas."}], "lastModified": "2024-11-21T01:52:51.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B76A06D-761D-4CFE-A9E6-FC5A1F726CF5"}, {"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "519B7097-7E46-4520-B9F9-A85E13A0F9CE"}, {"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B00BAD84-4BB6-41ED-835E-86AB150716D9"}, {"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"}, {"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"}, {"criteria": "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}