CVE-2013-2979

CWE-22 — Path Traversal4 documents4 sources

Severity

4.0MEDIUM

EPSS

0.2%

top 57.67%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Optim Performance Manager IBM Optim Performance Manager

Timeline

PublishedAug 22

Latest updateMay 17

Description

Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/infosphere_optim_performance_manager5.1.0, 5.1.1.0, 5.1.1.1+2

▶NVDibm/optim_performance_manager4.1.1

🔴Vulnerability Details

GHSA

GHSA-r9wr-qv2x-hhw9: Directory traversal vulnerability in IBM Optim Performance Manager 4↗2022-05-17

▶

CVEList

CVE-2013-2979: Directory traversal vulnerability in IBM Optim Performance Manager 4↗2013-08-22

▶

💥Exploits & PoCs

Exploit-DB

DotNetNuke DNNArticle Module 10.0 - SQL Injection↗2013-08-15

▶