CVE-2013-3997: Input Validation
Published Mar 26, 2014
·Updated
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
10 affected components
IBM Infosphere BigInsights=1.1.0.0
IBM Infosphere BigInsights=1.1.0.1
IBM Infosphere BigInsights=1.1.0.2
IBM Infosphere BigInsights=1.2.0.0
IBM Infosphere BigInsights=1.3.0.0
IBM Infosphere BigInsights=1.3.0.1
IBM Infosphere BigInsights=1.4.0.0
IBM Infosphere BigInsights=2.0.0.0
IBM Infosphere BigInsights=2.1.0.0
IBM Infosphere BigInsights=2.1.0.1
Event History
Mar 26, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3997?
CVE-2013-3997 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-3997?
To fix CVE-2013-3997, upgrade to IBM InfoSphere BigInsights version 2.1 FP2 or later.
3
What type of attack can be performed using CVE-2013-3997?
CVE-2013-3997 can be exploited to conduct phishing attacks by redirecting users to arbitrary websites.
4
Who is affected by CVE-2013-3997?
CVE-2013-3997 affects authenticated users of IBM InfoSphere BigInsights versions prior to 2.1 FP2.
5
What are the affected versions of IBM InfoSphere BigInsights for CVE-2013-3997?
Affected versions of IBM InfoSphere BigInsights for CVE-2013-3997 include 1.1.0.0 through 2.1.0.1.