3.5

CVE-2013-5414

EPSS 1.46%
Veröffentlicht 18.11.2013 05:23:57
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in opportunistic circumstances by accessing resources in between a migration and a role evaluation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 39 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version 7.0

Ibm ≫ Websphere Application Server Version 7.0.0.1

Ibm ≫ Websphere Application Server Version 7.0.0.2

Ibm ≫ Websphere Application Server Version 7.0.0.3

Ibm ≫ Websphere Application Server Version 7.0.0.4

Ibm ≫ Websphere Application Server Version 7.0.0.5

Ibm ≫ Websphere Application Server Version 7.0.0.6

Ibm ≫ Websphere Application Server Version 7.0.0.7

Ibm ≫ Websphere Application Server Version 7.0.0.8

Ibm ≫ Websphere Application Server Version 7.0.0.9

Ibm ≫ Websphere Application Server Version 7.0.0.10

Ibm ≫ Websphere Application Server Version 7.0.0.11

Ibm ≫ Websphere Application Server Version 7.0.0.12

Ibm ≫ Websphere Application Server Version 7.0.0.13

Ibm ≫ Websphere Application Server Version 7.0.0.14

Ibm ≫ Websphere Application Server Version 7.0.0.15

Ibm ≫ Websphere Application Server Version 7.0.0.16

Ibm ≫ Websphere Application Server Version 7.0.0.17

Ibm ≫ Websphere Application Server Version 7.0.0.18

Ibm ≫ Websphere Application Server Version 7.0.0.19

Ibm ≫ Websphere Application Server Version 7.0.0.21

Ibm ≫ Websphere Application Server Version 7.0.0.22

Ibm ≫ Websphere Application Server Version 7.0.0.23

Ibm ≫ Websphere Application Server Version 7.0.0.24

Ibm ≫ Websphere Application Server Version 7.0.0.25

Ibm ≫ Websphere Application Server Version 7.0.0.27

Ibm ≫ Websphere Application Server Version 7.0.0.29

Ibm ≫ Websphere Application Server Version 8.0.0.0

Ibm ≫ Websphere Application Server Version 8.0.0.1

Ibm ≫ Websphere Application Server Version 8.0.0.2

Ibm ≫ Websphere Application Server Version 8.0.0.3

Ibm ≫ Websphere Application Server Version 8.0.0.4

Ibm ≫ Websphere Application Server Version 8.0.0.5

Ibm ≫ Websphere Application Server Version 8.0.0.6

Ibm ≫ Websphere Application Server Version 8.0.0.7

Ibm ≫ Websphere Application Server Version 8.5.0.0

Ibm ≫ Websphere Application Server Version 8.5.0.1

Ibm ≫ Websphere Application Server Version 8.5.0.2

Ibm ≫ Websphere Application Server Version 8.5.5.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.46%	0.701

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www-01.ibm.com/support/docview.wss?&uid=swg21651880

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1PM92313

https://exchange.xforce.ibmcloud.com/vulnerabilities/87476

https://nvd.nist.gov/vuln/detail/CVE-2013-5414

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5414

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5414

EUVD