CVEvulnerability
CVE-2013-5400
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-02-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.
Affected configurations
• ibm platform symphony 5.2
• ibm platform symphony 6.1.0
• ibm platform symphony 6.1.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87296 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87296 exchange.xforce.ibmcloud.com