CVEvulnerability
CVE-2013-4043
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.
Affected configurations
• ibm spss collaboration and deployment services 4.1.1.1
• ibm spss collaboration and deployment services 4.1.1.2
• ibm spss collaboration and deployment services 4.1.1.3
• ibm spss collaboration and deployment services 4.2.1
• ibm spss collaboration and deployment services 4.2.1.1
• ibm spss collaboration and deployment services 4.2.1.2
• ibm spss collaboration and deployment services 4.2.1.3
• ibm spss collaboration and deployment services 5.0.0
• ibm spss collaboration and deployment services 5.0.0.1
• ibm spss collaboration and deployment services 5.0.0.2
• ibm spss collaboration and deployment services 5.0.1
• ibm spss collaboration and deployment services 5.0.2
• ibm spss collaboration and deployment services 6.0.0.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21661169 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86419 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21661169 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86419 exchange.xforce.ibmcloud.com