CVEvulnerability
CVE-2013-6734
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container.
Affected configurations
• ibm websphere extreme scale client (<= 8.6.0.4)
• ibm websphere extreme scale client 7.0.0.0
• ibm websphere extreme scale client 7.1.0.0
• ibm websphere extreme scale client 7.1.0.2
• ibm websphere extreme scale client 7.1.0.3
• ibm websphere extreme scale client 7.1.1.0
• ibm websphere extreme scale client 7.1.1.1
• ibm websphere extreme scale client 8.5.0.0
• ibm websphere extreme scale client 8.5.0.1
• ibm websphere extreme scale client 8.5.0.2
• ibm websphere extreme scale client 8.5.0.3
• ibm websphere extreme scale client 8.6.0.0
• ibm websphere extreme scale client 8.6.0.1
• ibm websphere extreme scale client 8.6.0.2
• ibm websphere extreme scale client 8.6.0.3
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21664641 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89397 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21664641 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89397 exchange.xforce.ibmcloud.com