CVEvulnerability
CVE-2013-4012
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
Affected configurations
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM93172 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660011 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85618 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM93172 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660011 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85618 exchange.xforce.ibmcloud.com