CVE-2013-5454 — Sensitive Information Exposure in IBM Websphere Portal

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 53.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Portal
Timeline
PublishedNov 18
Latest updateMay 17

Description

IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/websphere_portal26 versions+25

🔴Vulnerability Details

2
GHSA
GHSA-6627-4m3v-x6v4: IBM WebSphere Portal 6↗2022-05-17
▶
CVEList
CVE-2013-5454: IBM WebSphere Portal 6↗2013-11-16
▶
CVE-2013-5454 — Sensitive Information Exposure in IBM | cvebase