Lucene search

IbmCVE-2013-4066

HistoryOct 02, 2013 - 10:55 p.m.

CVE-2013-4066

2013-10-0222:55:23

CWE-20

ibm

web.nvd.nist.gov

ibm

infosphere

information server

clickjacking

vulnerability

nvd

cve-2013-4066

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.

Affected configurations

Nvd

Node

ibminfosphere_information_serverMatch8.0

ibminfosphere_information_serverMatch8.1

ibminfosphere_information_serverMatch8.5

ibminfosphere_information_serverMatch8.5.0.1

ibminfosphere_information_serverMatch8.5.0.2

ibminfosphere_information_serverMatch8.5.0.3

ibminfosphere_information_serverMatch8.7

ibminfosphere_information_serverMatch9.1

VendorProductVersionCPE
ibminfosphere_information_server8.0cpe:2.3:a:ibm:infosphere_information_server:8.0:*:*:*:*:*:*:*
ibminfosphere_information_server8.1cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.5cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.1cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.2cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.3cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*
ibminfosphere_information_server8.7cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
ibminfosphere_information_server9.1cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_information_server	8.0	cpe:2.3:a:ibm:infosphere_information_server:8.0:::::::*
ibm	infosphere_information_server	8.1	cpe:2.3:a:ibm:infosphere_information_server:8.1:::::::*
ibm	infosphere_information_server	8.5	cpe:2.3:a:ibm:infosphere_information_server:8.5:::::::*
ibm	infosphere_information_server	8.5.0.1	cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:::::::*
ibm	infosphere_information_server	8.5.0.2	cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:::::::*
ibm	infosphere_information_server	8.5.0.3	cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:::::::*
ibm	infosphere_information_server	8.7	cpe:2.3:a:ibm:infosphere_information_server:8.7:::::::*
ibm	infosphere_information_server	9.1	cpe:2.3:a:ibm:infosphere_information_server:9.1:::::::*

References

www.ibm.com/support/docview.wss?uid=swg21651343

www.securityfocus.com/bid/62767

exchange.xforce.ibmcloud.com/vulnerabilities/86597

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

Related for CVE-2013-4066