CVE-2013-2993

Опубликовано: 01 авг. 2013

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user's active session via unknown vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00197

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-39f9-33vw-m4qr

github

больше 3 лет назад