CVE-2013-4012
First published: Sun Dec 22 2013(Updated: )
IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Portal | =8.0.0.0 | |
| IBM WebSphere Portal | =8.0.0.1 | |
| IBM Content Template Catalog | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4012?
CVE-2013-4012 is classified as a medium severity vulnerability due to the potential for data modification and denial of service.
How do I fix CVE-2013-4012?
To fix CVE-2013-4012, upgrade your IBM WebSphere Portal to version 8.0.0.1 or later.
Who is affected by CVE-2013-4012?
CVE-2013-4012 affects users of IBM WebSphere Portal 8.0.0.0 and 8.0.0.1 when using Content Template Catalog 4.0.
What does CVE-2013-4012 allow attackers to do?
CVE-2013-4012 allows remote authenticated users to install Portal Application Archive files without administrative privileges, leading to potential data manipulation.
Is there a workaround for CVE-2013-4012?
There are no documented workarounds for CVE-2013-4012, so upgrading to the patched version is necessary.
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/remedy
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm websphere portal
- version/ibm websphere portal/8.0.0.0
- version/ibm websphere portal/8.0.0.1
- canonical/ibm content template catalog
- version/ibm content template catalog/4.0