cbcvebase.
CVE-2013-4012
published 2013-12-22

CVE-2013-4012: IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application…

PriorityP420medium4.9CVSS 2.0
AVNACMAuSCNIPAP
EPSS
1.05%
60.7th percentile
IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_portal——
ibmwebsphere_portal——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.