5.3

CVE-2013-5391

IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.0 Fix Pack 2 make it easier for attackers to defeat cryptographic protection mechanisms by leveraging improper initialization of the pseudo random number generator (PRNG) in Android and use of the Java Cryptography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Worklight Version 5.0.0.0 SwEdition consumer
Ibm ≫ Worklight Version 5.0.0.0 SwEdition enterprise
Ibm ≫ Worklight Version 5.0.5.0 SwEdition consumer
Ibm ≫ Worklight Version 5.0.5.0 SwEdition enterprise
Ibm ≫ Worklight Version 5.0.6.0 SwEdition consumer
Ibm ≫ Worklight Version 5.0.6.0 SwEdition enterprise
Ibm ≫ Worklight Version 6.0.0.0 SwEdition consumer
Ibm ≫ Worklight Version 6.0.0.0 SwEdition enterprise
Ibm ≫ Mobile Foundation Version 5.0.0.0 SwEdition consumer
Ibm ≫ Mobile Foundation Version 5.0.0.0 SwEdition enterprise
Ibm ≫ Mobile Foundation Version 5.0.5.0 SwEdition consumer
Ibm ≫ Mobile Foundation Version 5.0.5.0 SwEdition enterprise
Ibm ≫ Mobile Foundation Version 5.0.6.0 SwEdition consumer
Ibm ≫ Mobile Foundation Version 5.0.6.0 SwEdition enterprise
Ibm ≫ Mobile Foundation Version 6.0.0.0 SwEdition consumer
Ibm ≫ Mobile Foundation Version 6.0.0.0 SwEdition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.03% 0.594
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 1.6 3.6
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21665731
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87128
Vendor Advisory
VDB Entry