Vulnerability in IBM Websphere Extreme Scale Client
CVE-2013-6734
IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container.
EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_extreme_scale_client — versions 7.0.0.0, 7.1.0.0, 7.1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)