CVE-2013-5397
low
CVSS v3
—
CVSS v2
3.3
VIR risk
3.3
Description
Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5398.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21654471
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | rational_focal_point | 6.4 | |
| ibm | rational_focal_point | 6.4.1.3 | |
| ibm | rational_focal_point | 6.5.1 | |
| ibm | rational_focal_point | 6.5.2 | |
| ibm | rational_focal_point | 6.5.2.3 | |
| ibm | rational_focal_point | 6.6 | |
| ibm | rational_focal_point | 6.6.0.1 | |
| ibm | rational_focal_point | 6.6.1 | |
References
Verify integrity in audit chain (admin only). AS-IS.