Lucene search

K
cveIbmCVE-2013-6731
HistoryFeb 26, 2014 - 2:55 p.m.

CVE-2013-6731

2014-02-2614:55:08
CWE-264
ibm
web.nvd.nist.gov
25
ibm
netezza
performance portal
cve-2013-6731
security
vulnerability

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

34.2%

IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request.

Affected configurations

Nvd
Node
ibmnetezza_performance_portalMatch2.0
OR
ibmnetezza_performance_portalMatch2.0.0.1
OR
ibmnetezza_performance_portalMatch2.0.0.2
VendorProductVersionCPE
ibmnetezza_performance_portal2.0cpe:2.3:a:ibm:netezza_performance_portal:2.0:*:*:*:*:*:*:*
ibmnetezza_performance_portal2.0.0.1cpe:2.3:a:ibm:netezza_performance_portal:2.0.0.1:*:*:*:*:*:*:*
ibmnetezza_performance_portal2.0.0.2cpe:2.3:a:ibm:netezza_performance_portal:2.0.0.2:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

34.2%

Related for CVE-2013-6731