Vulnerability Description
IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Portal | 6.0.0.0 |
Related Weaknesses (CWE)
References
- http://osvdb.org/101255
- http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-InjectExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/56161
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI07777Not Applicable
- http://www-01.ibm.com/support/docview.wss?uid=swg21660289PatchVendor Advisory
- http://www.securityfocus.com/archive/1/530552/100/0/threaded
- http://www.securityfocus.com/bid/64496Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1029539Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89591
- https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_avaiThird Party AdvisoryVDB Entry
- http://osvdb.org/101255
- http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-InjectExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/56161
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI07777Not Applicable
- http://www-01.ibm.com/support/docview.wss?uid=swg21660289PatchVendor Advisory
FAQ
What is CVE-2013-6735?
CVE-2013-6735 is a vulnerability with a CVSS score of 5.0 (MEDIUM). IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows...
How severe is CVE-2013-6735?
CVE-2013-6735 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-6735?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Portal.