CVE-2013-5393

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21652630	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87153

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:::::::*
	cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:::::::*
	cpe:2.3:a:ibm:websphere_extreme_scale:8.5.0:::::::*
	cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0:::::::*

History

No history.

Information

Published : 2013-10-16 10:52

Updated : 2024-02-04 18:16

NVD link : CVE-2013-5393

Mitre link : CVE-2013-5393

CVE.ORG link : CVE-2013-5393

JSON object : View

Products Affected

ibm

websphere_extreme_scale

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-5393", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-16T10:52:45.183", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21652630", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87153", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors."}, {"lang": "es", "value": "La consola de monitorizaci\u00f3n en IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, y 8.6.0 no procesa adecuadamente acciones de cierre de sesi\u00f3n, lo que tiene un impacto desconocido y vectores de ataque remotos."}], "lastModified": "2017-08-29T01:33:45.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCF504C3-FC26-4B47-9D19-3095CEA85014"}, {"criteria": "cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0472C4A-F281-4D5F-BC47-93427833B907"}, {"criteria": "cpe:2.3:a:ibm:websphere_extreme_scale:8.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F24E300-FCBA-42E7-A0A0-8067FBE11C9F"}, {"criteria": "cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AA9F779-1F92-485D-BC34-0CB3A9FFA48A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}