CVE-2013-0544: Path Traversal

Published Apr 24, 2013

Updated

Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.

Affected Software

54 affected components

IBM WebSphere Application Server=6.1.0.0

IBM WebSphere Application Server=6.1.0.1

IBM WebSphere Application Server=6.1.0.2

IBM WebSphere Application Server=6.1.0.3

IBM WebSphere Application Server=6.1.0.5

IBM WebSphere Application Server=6.1.0.7

IBM WebSphere Application Server=6.1.0.9

IBM WebSphere Application Server=6.1.0.11

IBM WebSphere Application Server=6.1.0.12

IBM WebSphere Application Server=6.1.0.13

IBM WebSphere Application Server=6.1.0.14

IBM WebSphere Application Server=6.1.0.15

IBM WebSphere Application Server=6.1.0.17

IBM WebSphere Application Server=6.1.0.19

IBM WebSphere Application Server=6.1.0.21

IBM WebSphere Application Server=6.1.0.23

IBM WebSphere Application Server=6.1.0.25

IBM WebSphere Application Server=6.1.0.27

IBM WebSphere Application Server=6.1.0.29

IBM WebSphere Application Server=6.1.0.31

IBM WebSphere Application Server=6.1.0.33

IBM WebSphere Application Server=6.1.0.35

IBM WebSphere Application Server=6.1.0.37

IBM WebSphere Application Server=6.1.0.39

IBM WebSphere Application Server=6.1.0.41

IBM WebSphere Application Server=6.1.0.43

IBM WebSphere Application Server=6.1.0.45

Linux Linux kernel

IBM WebSphere Application Server=7.0.0.1

IBM WebSphere Application Server=7.0.0.2

IBM WebSphere Application Server=7.0.0.3

IBM WebSphere Application Server=7.0.0.4

IBM WebSphere Application Server=7.0.0.5

IBM WebSphere Application Server=7.0.0.6

IBM WebSphere Application Server=7.0.0.7

IBM WebSphere Application Server=7.0.0.8

IBM WebSphere Application Server=7.0.0.9

IBM WebSphere Application Server=7.0.0.11

IBM WebSphere Application Server=7.0.0.13

IBM WebSphere Application Server=7.0.0.15

IBM WebSphere Application Server=7.0.0.17

IBM WebSphere Application Server=7.0.0.19

IBM WebSphere Application Server=7.0.0.21

IBM WebSphere Application Server=7.0.0.23

IBM WebSphere Application Server=7.0.0.25

IBM WebSphere Application Server=7.0.0.27

IBM WebSphere Application Server=8.0.0.0

IBM WebSphere Application Server=8.0.0.1

IBM WebSphere Application Server=8.0.0.2

IBM WebSphere Application Server=8.0.0.3

IBM WebSphere Application Server=8.0.0.4

IBM WebSphere Application Server=8.0.0.5

IBM WebSphere Application Server=8.5.0.0

IBM WebSphere Application Server=8.5.0.1

Event History

Apr 24, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0544?

CVE-2013-0544 is classified as a high-severity vulnerability that allows remote authenticated users to modify data.

How do I fix CVE-2013-0544?

To fix CVE-2013-0544, upgrade to IBM WebSphere Application Server version 6.1.0.47, 7.0.0.29, 8.0.0.6, or 8.5.0.2 or later.

What causes CVE-2013-0544?

CVE-2013-0544 is caused by a directory traversal vulnerability in the Administrative Console of IBM WebSphere Application Server.

Which versions of IBM WebSphere Application Server are affected by CVE-2013-0544?

CVE-2013-0544 affects IBM WebSphere Application Server versions 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2.

Who can exploit CVE-2013-0544?

CVE-2013-0544 can be exploited by remote authenticated users who have access to the Administrative Console.