Unscored severity · published Mar 29, 2013
CVE-2013-0474
The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to…
–
CVSS
1%
EPSS
No
On KEV
Description
The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rational Policy Tester · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +4 more · source: NVD
SA
Security Appscan · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0474
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0474
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/81338
More from Rational Policy Tester
–
CVE-2013-4062
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain…
–
CVE-2013-4061
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to…
–
CVE-2013-0532
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote…
–
CVE-2013-0513
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the…
–
CVE-2013-0512
Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x…