CVE-2013-1615 — Sensitive Information Exposure in Security Information Manager

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
2.9LOWNVD
EPSS
0.1%
top 69.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Security Information Manager
Timeline
PublishedJul 8
Latest updateMay 17

Description

The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls.

CVSS vector

AV:A/AC:M/C:P/I:N/A:NExploitability: 5.5 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-vj5h-c369-x6jg: The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4↗2022-05-17
▶
CVEList
CVE-2013-1615: The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4↗2013-07-08
▶
CVE-2013-1615 — Sensitive Information Exposure | cvebase