CVEvulnerability
CVE-2013-5461
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309.
Affected configurations
• ibm endpoint manager for remote control 9.0.0
• ibm endpoint manager for remote control 9.0.1
• ibm tivoli remote control 5.1.2
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88309 VDB Entry, Vendor Advisory
- https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-ibm-endpoint-manager-for-remote-control-cve-2013-5461/ Vendor Advisory
- https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5461/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88309 VDB Entry, Vendor Advisory
- https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-ibm-endpoint-manager-for-remote-control-cve-2013-5461/ Vendor Advisory
- https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5461/ Vendor Advisory