CVE-2013-5453

CWE-200 — Information Exposure3 documents3 sources
Severity
3.5LOW
EPSS
0.2%
top 63.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Appscan
Timeline
PublishedNov 13
Latest updateMay 17

Description

IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/security_appscan18 versions+17

🔴Vulnerability Details

2
GHSA
GHSA-2px6-vpqc-46h5: IBM Security AppScan Enterprise 5↗2022-05-17
▶
CVEList
CVE-2013-5453: IBM Security AppScan Enterprise 5↗2013-11-13
▶
CVE-2013-5453 (LOW CVSS 3.5) | IBM Security AppScan Enterprise 5.6 | cvebase.io