CVEvulnerability
CVE-2013-5468
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• ibm algo one 4.7.0
• ibm algo one 4.7.1
• ibm algo one 4.8.0
• ibm algo one 4.9.0
• ibm algo one 4.9.1
• ibm algo one 5.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88382 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88382 exchange.xforce.ibmcloud.com