CVEvulnerability
CVE-2013-4067
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.
Affected configurations
• ibm infosphere information server 8.0
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.5.0.1
• ibm infosphere information server 8.5.0.2
• ibm infosphere information server 8.5.0.3
• ibm infosphere information server 8.7
• ibm infosphere information server 9.1
Related
Weakness · not in database (1)
References
- http://www.ibm.com/support/docview.wss?uid=swg21651343 Vendor Advisory
- http://www.securityfocus.com/bid/62768 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86598 exchange.xforce.ibmcloud.com
- http://www.ibm.com/support/docview.wss?uid=swg21651343 Vendor Advisory
- http://www.securityfocus.com/bid/62768 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86598 exchange.xforce.ibmcloud.com