CVE-2013-3993

MEDIUMCISA KEV

6.5

Beschreibung

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

CVE Details

CVSS v3.1 Bewertung6.5

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht7/7/2014

Zuletzt geandert4/21/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerIBM

ProduktInfoSphere BigInsights

SchwachstellennameIBM InfoSphere BigInsights Invalid Input Vulnerability

KEV Aufnahmedatum2022-05-25

Behebungsfrist2022-06-15

Ransomware-NutzungKnown

Betroffene Produkte

ibm:infosphere_biginsights

Schwachen (CWE)

CWE-22CWE-22

Referenzen

http://secunia.com/advisories/59676(psirt@us.ibm.com)

http://www-01.ibm.com/support/docview.wss?uid=swg21677445(psirt@us.ibm.com)

http://www.securityfocus.com/bid/68449(psirt@us.ibm.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/84982(psirt@us.ibm.com)

http://secunia.com/advisories/59676(af854a3a-2127-422b-91ae-364da2661108)

http://www-01.ibm.com/support/docview.wss?uid=swg21677445(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/68449(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/84982(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.