Lucene search

K
cveIbmCVE-2013-4070
HistoryDec 21, 2013 - 2:22 p.m.

CVE-2013-4070

2013-12-2114:22:56
CWE-200
ibm
web.nvd.nist.gov
19
ibm
spss
collaboration
deployment services
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

69.1%

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors.

Affected configurations

Nvd
Node
ibmspss_collaboration_and_deployment_servicesMatch4.2.1
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.1
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.2
OR
ibmspss_collaboration_and_deployment_servicesMatch4.2.1.3
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0.1
OR
ibmspss_collaboration_and_deployment_servicesMatch5.0.0.2
VendorProductVersionCPE
ibmspss_collaboration_and_deployment_services4.2.1cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:4.2.1:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services4.2.1.1cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:4.2.1.1:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services4.2.1.2cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:4.2.1.2:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services4.2.1.3cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:4.2.1.3:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services5.0.0cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:5.0.0:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services5.0.0.1cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:5.0.0.1:*:*:*:*:*:*:*
ibmspss_collaboration_and_deployment_services5.0.0.2cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:5.0.0.2:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

69.1%

Related for CVE-2013-4070