CVE-2013-5400

EPSS 2.83%
Published 14.02.2014 13:10:30
Last modified 11.04.2025 00:51:21
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Platform Symphony Version5.2 SwEditiondeveloper

Ibm ≫ Platform Symphony Version6.1.0 SwEditiondeveloper

Ibm ≫ Platform Symphony Version6.1.1 SwEditiondeveloper

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.83%	0.857

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/87296

https://nvd.nist.gov/vuln/detail/CVE-2013-5400

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5400

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5400

EUVD