Information disclosure in IBM Spss Collaboration And Deployment Services

CVE-2013-4044

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request.

Vulnerability class: Information Disclosure

EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Spss_collaboration_and_deployment_services — versions 4.2.1, 4.2.1.1, 4.2.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)