CVE-2013-6723: Medium severity IBM WebSphere Portal vulnerability

Published Dec 22, 2013

Updated

IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to obtain sensitive component information via unspecified vectors.

Affected Software

1 affected component

IBM WebSphere Portal=8.0.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21660011

Event History

Dec 22, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6723?

CVE-2013-6723 is considered a medium severity vulnerability due to the potential exposure of sensitive information.

How do I fix CVE-2013-6723?

To remediate CVE-2013-6723, upgrade IBM WebSphere Portal to version 8.0.0.1 with the latest fix pack CF09 or later.

Who is affected by CVE-2013-6723?

CVE-2013-6723 affects IBM WebSphere Portal version 8.0.0.1 prior to CF09.

What type of attack does CVE-2013-6723 permit?

CVE-2013-6723 allows remote attackers to obtain sensitive component information through improper handling of navigator components.

Is CVE-2013-6723 a local or remote vulnerability?

CVE-2013-6723 is a remote vulnerability that can be exploited by attackers without physical access to the system.