CVE-2013-2976: Infoleak
First published: Wed Aug 21 2013(Updated: )
The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.4 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.6 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.7 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.9 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.11 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.12 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.13 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.14 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.15 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.17 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.19 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.21 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.23 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.25 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.27 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.29 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.31 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.33 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.35 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.37 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.39 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.41 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.43 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.0.45 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.6 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.7 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.13 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1.14 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.4 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.6 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.7 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.8 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.9 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.10 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.11 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.12 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.13 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.14 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.15 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.16 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.17 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.18 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.19 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.21 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.22 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.23 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.24 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.25 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.27 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-2976?
The severity of CVE-2013-2976 is classified as medium risk due to the potential for local users to gain access to sensitive information.
How do I fix CVE-2013-2976?
To fix CVE-2013-2976, update your IBM WebSphere Application Server to the fixed versions: 6.1.0.47, 7.0.0.29, 8.0.0.7, or 8.5.5.0.
Which versions of IBM WebSphere Application Server are affected by CVE-2013-2976?
CVE-2013-2976 affects IBM WebSphere Application Server versions 6.1 through 8.5.0.0 prior to the mentioned fixes.
Can CVE-2013-2976 be exploited remotely?
CVE-2013-2976 requires local access for exploitation, so it cannot be directly exploited remotely.
What type of information can be accessed due to CVE-2013-2976?
CVE-2013-2976 allows local users to obtain unspecified sensitive information from IBM WebSphere Application Server.
- agent/type
- agent/event
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- vendor/ibm
- canonical/ibm websphere application server with web server plug-ins
- version/ibm websphere application server with web server plug-ins/8.0.0.0
- version/ibm websphere application server with web server plug-ins/8.0.0.1
- version/ibm websphere application server with web server plug-ins/8.0.0.2
- version/ibm websphere application server with web server plug-ins/8.0.0.3
- version/ibm websphere application server with web server plug-ins/8.0.0.4
- version/ibm websphere application server with web server plug-ins/8.0.0.5
- version/ibm websphere application server with web server plug-ins/8.0.0.6
- version/ibm websphere application server with web server plug-ins/6.1
- version/ibm websphere application server with web server plug-ins/6.1.0
- version/ibm websphere application server with web server plug-ins/6.1.0.0
- version/ibm websphere application server with web server plug-ins/6.1.0.1
- version/ibm websphere application server with web server plug-ins/6.1.0.2
- version/ibm websphere application server with web server plug-ins/6.1.0.3
- version/ibm websphere application server with web server plug-ins/6.1.0.5
- version/ibm websphere application server with web server plug-ins/6.1.0.7
- version/ibm websphere application server with web server plug-ins/6.1.0.9
- version/ibm websphere application server with web server plug-ins/6.1.0.11
- version/ibm websphere application server with web server plug-ins/6.1.0.12
- version/ibm websphere application server with web server plug-ins/6.1.0.13
- version/ibm websphere application server with web server plug-ins/6.1.0.14
- version/ibm websphere application server with web server plug-ins/6.1.0.15
- version/ibm websphere application server with web server plug-ins/6.1.0.17
- version/ibm websphere application server with web server plug-ins/6.1.0.19
- version/ibm websphere application server with web server plug-ins/6.1.0.21
- version/ibm websphere application server with web server plug-ins/6.1.0.23
- version/ibm websphere application server with web server plug-ins/6.1.0.25
- version/ibm websphere application server with web server plug-ins/6.1.0.27
- version/ibm websphere application server with web server plug-ins/6.1.0.29
- version/ibm websphere application server with web server plug-ins/6.1.0.31
- version/ibm websphere application server with web server plug-ins/6.1.0.33
- version/ibm websphere application server with web server plug-ins/6.1.0.35
- version/ibm websphere application server with web server plug-ins/6.1.0.37
- version/ibm websphere application server with web server plug-ins/6.1.0.39
- version/ibm websphere application server with web server plug-ins/6.1.0.41
- version/ibm websphere application server with web server plug-ins/6.1.0.43
- version/ibm websphere application server with web server plug-ins/6.1.0.45
- version/ibm websphere application server with web server plug-ins/6.1.1
- version/ibm websphere application server with web server plug-ins/6.1.3
- version/ibm websphere application server with web server plug-ins/6.1.5
- version/ibm websphere application server with web server plug-ins/6.1.6
- version/ibm websphere application server with web server plug-ins/6.1.7
- version/ibm websphere application server with web server plug-ins/6.1.13
- version/ibm websphere application server with web server plug-ins/6.1.14
- version/ibm websphere application server with web server plug-ins/7.0
- version/ibm websphere application server with web server plug-ins/7.0.0.1
- version/ibm websphere application server with web server plug-ins/7.0.0.2
- version/ibm websphere application server with web server plug-ins/7.0.0.3
- version/ibm websphere application server with web server plug-ins/7.0.0.4
- version/ibm websphere application server with web server plug-ins/7.0.0.5
- version/ibm websphere application server with web server plug-ins/7.0.0.6
- version/ibm websphere application server with web server plug-ins/7.0.0.7
- version/ibm websphere application server with web server plug-ins/7.0.0.8
- version/ibm websphere application server with web server plug-ins/7.0.0.9
- version/ibm websphere application server with web server plug-ins/7.0.0.10
- version/ibm websphere application server with web server plug-ins/7.0.0.11
- version/ibm websphere application server with web server plug-ins/7.0.0.12
- version/ibm websphere application server with web server plug-ins/7.0.0.13
- version/ibm websphere application server with web server plug-ins/7.0.0.14
- version/ibm websphere application server with web server plug-ins/7.0.0.15
- version/ibm websphere application server with web server plug-ins/7.0.0.16
- version/ibm websphere application server with web server plug-ins/7.0.0.17
- version/ibm websphere application server with web server plug-ins/7.0.0.18
- version/ibm websphere application server with web server plug-ins/7.0.0.19
- version/ibm websphere application server with web server plug-ins/7.0.0.21
- version/ibm websphere application server with web server plug-ins/7.0.0.22
- version/ibm websphere application server with web server plug-ins/7.0.0.23
- version/ibm websphere application server with web server plug-ins/7.0.0.24
- version/ibm websphere application server with web server plug-ins/7.0.0.25
- version/ibm websphere application server with web server plug-ins/7.0.0.27
- version/ibm websphere application server with web server plug-ins/8.5.0.0
- version/ibm websphere application server with web server plug-ins/8.5.0.1
- version/ibm websphere application server with web server plug-ins/8.5.0.2