Lucene search

IbmCVE-2013-3003

HistoryJul 02, 2013 - 2:12 p.m.

CVE-2013-3003

2013-07-0214:12:50

ibm

web.nvd.nist.gov

vulnerability

soap gateway

ibm ims enterprise suite

remote authenticated users

arbitrary commands

cve-2013-3003

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

53.9%

JSON

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors.

Affected configurations

Nvd

Node

ibmims_enterprise_suiteMatch1.1

ibmims_enterprise_suiteMatch2.1

ibmims_enterprise_suiteMatch2.2

VendorProductVersionCPE
ibmims_enterprise_suite1.1cpe:2.3:a:ibm:ims_enterprise_suite:1.1:*:*:*:*:*:*:*
ibmims_enterprise_suite2.1cpe:2.3:a:ibm:ims_enterprise_suite:2.1:*:*:*:*:*:*:*
ibmims_enterprise_suite2.2cpe:2.3:a:ibm:ims_enterprise_suite:2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	ims_enterprise_suite	1.1	cpe:2.3:a:ibm:ims_enterprise_suite:1.1:::::::*
ibm	ims_enterprise_suite	2.1	cpe:2.3:a:ibm:ims_enterprise_suite:2.1:::::::*
ibm	ims_enterprise_suite	2.2	cpe:2.3:a:ibm:ims_enterprise_suite:2.2:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg21641655

exchange.xforce.ibmcloud.com/vulnerabilities/84129

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

53.9%

JSON

Related for CVE-2013-3003