Vulnerability Description
IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Directory Server | <= 5.1.1.2 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21637151Vendor Advisory
- http://www.securityfocus.com/bid/60107
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83613
- http://www-01.ibm.com/support/docview.wss?uid=swg21637151Vendor Advisory
- http://www.securityfocus.com/bid/60107
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83613
FAQ
What is CVE-2013-0599?
CVE-2013-0599 is a vulnerability with a CVSS score of 5.0 (MEDIUM). IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by prov...
How severe is CVE-2013-0599?
CVE-2013-0599 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0599?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Rational Directory Server.