CVE-2013-5440

EPSS 0.05%
Veröffentlicht 18.12.2013 16:04:33
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Infosphere Information Server Version8.0

Ibm ≫ Infosphere Information Server Version8.1

Ibm ≫ Infosphere Information Server Version8.5

Ibm ≫ Infosphere Information Server Version8.7

Ibm ≫ Infosphere Information Server Version9.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.139

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg1JR48095

http://www-01.ibm.com/support/docview.wss?uid=swg21659957

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/87816

https://nvd.nist.gov/vuln/detail/CVE-2013-5440

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5440

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5440

EUVD