CVE-2013-4061

2013-09-0901:55:06

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

41.4%

JSON

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.

Affected configurations

Nvd

Node

ibmrational_policy_testerMatch8.5.0.0

ibmrational_policy_testerMatch8.5.0.1

ibmrational_policy_testerMatch8.5.0.2

ibmrational_policy_testerMatch8.5.0.3

ibmrational_policy_testerMatch8.5.0.4

VendorProductVersionCPE
ibmrational_policy_tester8.5.0.0cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*
ibmrational_policy_tester8.5.0.1cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*
ibmrational_policy_tester8.5.0.2cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*
ibmrational_policy_tester8.5.0.3cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*
ibmrational_policy_tester8.5.0.4cpe:2.3:a:ibm:rational_policy_tester:8.5.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_policy_tester	8.5.0.0	cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:::::::*
ibm	rational_policy_tester	8.5.0.1	cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:::::::*
ibm	rational_policy_tester	8.5.0.2	cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:::::::*
ibm	rational_policy_tester	8.5.0.3	cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:::::::*
ibm	rational_policy_tester	8.5.0.4	cpe:2.3:a:ibm:rational_policy_tester:8.5.0.4:::::::*