CVEvulnerability
CVE-2013-4070
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors.
Affected configurations
• ibm spss collaboration and deployment services 4.2.1
• ibm spss collaboration and deployment services 4.2.1.1
• ibm spss collaboration and deployment services 4.2.1.2
• ibm spss collaboration and deployment services 4.2.1.3
• ibm spss collaboration and deployment services 5.0.0
• ibm spss collaboration and deployment services 5.0.0.1
• ibm spss collaboration and deployment services 5.0.0.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660191 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86656 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660191 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86656 exchange.xforce.ibmcloud.com