IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/101255 - | |
| References | () http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://secunia.com/advisories/56161 - | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PI07777 - Not Applicable | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21660289 - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/archive/1/530552/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/64496 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1029539 - Third Party Advisory, VDB Entry | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/89591 - | |
| References | () https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_available_for_unauthorized_information_retrieval_security_vulnerability_in_ibm_websphere_portal_cve_2013_6735 - Third Party Advisory, VDB Entry |
Information
Published : 2013-12-22 15:16
Updated : 2024-11-21 01:59
NVD link : CVE-2013-6735
Mitre link : CVE-2013-6735
CVE.ORG link : CVE-2013-6735
JSON object : View
Products Affected
ibm
- websphere_portal
CWE
CWE-264
Permissions, Privileges, and Access Controls