First published: Sat Feb 01 2014(Updated: )
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM SPSS Collaboration and Deployment Services | =4.1.1.1 | |
IBM SPSS Collaboration and Deployment Services | =4.1.1.2 | |
IBM SPSS Collaboration and Deployment Services | =4.1.1.3 | |
IBM SPSS Collaboration and Deployment Services | =4.2.1 | |
IBM SPSS Collaboration and Deployment Services | =4.2.1.1 | |
IBM SPSS Collaboration and Deployment Services | =4.2.1.2 | |
IBM SPSS Collaboration and Deployment Services | =4.2.1.3 | |
IBM SPSS Collaboration and Deployment Services | =5.0.0 | |
IBM SPSS Collaboration and Deployment Services | =5.0.0.1 | |
IBM SPSS Collaboration and Deployment Services | =5.0.0.2 | |
IBM SPSS Collaboration and Deployment Services | =5.0.1 | |
IBM SPSS Collaboration and Deployment Services | =5.0.2 | |
IBM SPSS Collaboration and Deployment Services | =6.0.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4043 has a medium severity rating, as it allows unauthorized access to sensitive files.
To fix CVE-2013-4043, upgrade the IBM SPSS Collaboration and Deployment Services to version 4.2.1.3 IF3, 5.0 FP3, or 6.0 IF1 or later.
CVE-2013-4043 affects versions 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1.
Yes, CVE-2013-4043 can potentially lead to data breaches due to unauthorized file access.
CVE-2013-4043 allows remote attackers to read arbitrary files on the server.