Vulnerability in IBM Platform Symphony

CVE-2013-5400

An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

Affected products

Ibm Platform_symphony — versions 5.2, 6.1.0, 6.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)