CVEvulnerability
CVE-2013-5433
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document.
Affected configurations
• ibm infosphere optim data growth solution for siebel crm 3.2
• ibm infosphere optim data growth solution for siebel crm 3.2.1
• ibm infosphere optim data growth solution for siebel crm 3.2.2
• ibm infosphere optim data growth solution for siebel crm 3.2.3
• ibm infosphere optim data growth solution for siebel crm 9.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21680575 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87639 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21680575 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87639 exchange.xforce.ibmcloud.com