Vulnerability Description
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Algo One | 4.7.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88382
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88382
FAQ
What is CVE-2013-5468?
CVE-2013-5468 is a vulnerability with a CVSS score of 5.0 (MEDIUM). IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt ...
How severe is CVE-2013-5468?
CVE-2013-5468 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-5468?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Algo One.