CVEvulnerability
CVE-2013-2976
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.
Affected configurations
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
• ibm websphere application server 8.0.0.4
• ibm websphere application server 8.0.0.5
• ibm websphere application server 8.0.0.6
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.14
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 6.1.0.35
• ibm websphere application server 6.1.0.37
• ibm websphere application server 6.1.0.39
• ibm websphere application server 6.1.0.41
• ibm websphere application server 6.1.0.43
• ibm websphere application server 6.1.0.45
• ibm websphere application server 6.1.1
• ibm websphere application server 6.1.3
• ibm websphere application server 6.1.5
• ibm websphere application server 6.1.6
• ibm websphere application server 6.1.7
• ibm websphere application server 6.1.13
• ibm websphere application server 6.1.14
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.12
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.14
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.16
… and 12 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM79992 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21644047 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83965 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM79992 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21644047 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83965 exchange.xforce.ibmcloud.com