CVE-2013-6329

2013-12-1715:21:28

CWE-310

[email protected]

web.nvd.nist.gov

ibm

gskit

content manager ondemand

cve-2013-6329

security

denial of service

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

JSON

IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.

Affected configurations

NVD

Node

ibmcontent_manager_ondemand_for_multiplatformsMatch8.5

ibmcontent_manager_ondemand_for_multiplatformsMatch9.0

ibmglobal_security_kitMatch-

ibmsecurity_access_manager_for_webMatch6.0

ibmsecurity_access_manager_for_webMatch6.1

ibmsecurity_access_manager_for_webMatch6.1.1

ibmsecurity_access_manager_for_webMatch7.0

CPENameOperatorVersion
ibm:content_manager_ondemand_for_multiplatformsibm content manager ondemand for multiplatformseq8.5
ibm:content_manager_ondemand_for_multiplatformsibm content manager ondemand for multiplatformseq9.0
ibm:global_security_kitibm global security kiteq-
ibm:security_access_manager_for_webibm security access manager for webeq6.0
ibm:security_access_manager_for_webibm security access manager for webeq6.1
ibm:security_access_manager_for_webibm security access manager for webeq6.1.1
ibm:security_access_manager_for_webibm security access manager for webeq7.0

CPE	Name	Operator	Version
ibm:content_manager_ondemand_for_multiplatforms	ibm content manager ondemand for multiplatforms	eq	8.5
ibm:content_manager_ondemand_for_multiplatforms	ibm content manager ondemand for multiplatforms	eq	9.0
ibm:global_security_kit	ibm global security kit	eq	-
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.0
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.1
ibm:security_access_manager_for_web	ibm security access manager for web	eq	6.1.1
ibm:security_access_manager_for_web	ibm security access manager for web	eq	7.0