Lucene search
IbmCVE-2013-2993HistoryAug 01, 2013 - 1:32 p.m.
CVE-2013-2993
2013-08-0113:32:16
CWE-287
ibm
web.nvd.nist.gov
29
cve-2013-2993
ibm websphere commerce
authentication
vulnerability
remote attackers
web services
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
70.4%
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user’s active session via unknown vectors.
Affected configurations
Node
ibmwebsphere_commerceMatch6.0.0.1
ORibmwebsphere_commerceMatch6.0.0.2
ORibmwebsphere_commerceMatch6.0.0.3
ORibmwebsphere_commerceMatch6.0.0.4
ORibmwebsphere_commerceMatch6.0.0.5
ORibmwebsphere_commerceMatch6.0.0.6
ORibmwebsphere_commerceMatch6.0.0.7
ORibmwebsphere_commerceMatch6.0.0.8
ORibmwebsphere_commerceMatch6.0.0.9
ORibmwebsphere_commerceMatch6.0.0.10
ORibmwebsphere_commerceMatch6.0.0.11
Node
ibmwebsphere_commerceMatch7.0
ORibmwebsphere_commerceMatch7.0.0.1
ORibmwebsphere_commerceMatch7.0.0.2
ORibmwebsphere_commerceMatch7.0.0.3
ORibmwebsphere_commerceMatch7.0.0.4
ORibmwebsphere_commerceMatch7.0.0.5
ORibmwebsphere_commerceMatch7.0.0.6
ORibmwebsphere_commerceMatch7.0.0.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_commerce | 6.0.0.1 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.2 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.3 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.4 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.5 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.6 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.7 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.8 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.9 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.10 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-2993
2013-07-31 14:00:00
nvd
nvd
CVE-2013-2993
2013-08-01 13:32:16
prion
prion
Authentication flaw
2013-08-01 13:32:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
70.4%
Related for CVE-2013-2993