CVE-2013-5397
First published: Wed Dec 18 2013(Updated: )
Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5398.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Rational Focal Point | =6.4 | |
| IBM Rational Focal Point | =6.4.1.3 | |
| IBM Rational Focal Point | =6.5.1 | |
| IBM Rational Focal Point | =6.5.2 | |
| IBM Rational Focal Point | =6.5.2.3 | |
| IBM Rational Focal Point | =6.6 | |
| IBM Rational Focal Point | =6.6.0.1 | |
| IBM Rational Focal Point | =6.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-5397?
CVE-2013-5397 is classified as a medium severity vulnerability, allowing remote attackers to bypass intended access controls.
How do I fix CVE-2013-5397?
To fix CVE-2013-5397, you should apply the appropriate devfix updates for the affected versions of IBM Rational Focal Point.
Which versions of IBM Rational Focal Point are affected by CVE-2013-5397?
CVE-2013-5397 affects IBM Rational Focal Point versions including 6.4, 6.4.1.3, 6.5.1, 6.5.2, 6.5.2.3, 6.6, 6.6.0.1, and 6.6.1.
What type of attack does CVE-2013-5397 facilitate?
CVE-2013-5397 facilitates unauthorized access, allowing attackers to bypass intended access controls.
Is there a workaround for CVE-2013-5397 if I cannot update?
There is no known effective workaround for CVE-2013-5397, so applying the updates is essential.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- agent/source
- vendor/ibm
- canonical/ibm rational focal point
- version/ibm rational focal point/6.4
- version/ibm rational focal point/6.4.1.3
- version/ibm rational focal point/6.5.1
- version/ibm rational focal point/6.5.2
- version/ibm rational focal point/6.5.2.3
- version/ibm rational focal point/6.6
- version/ibm rational focal point/6.6.0.1
- version/ibm rational focal point/6.6.1