Vulnerability in IBM Websphere Portal
CVE-2013-6735
IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.
EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_portal — versions 6.0.0.0, 6.0.0.1, 6.0.1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_OSVDB, vdb-entry)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, Not Applicable, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM, VDB Entry, Third Party Advisory)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)