Unscored severity · published Mar 29, 2013
CVE-2013-0532
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rational Policy Tester · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +4 more · source: NVD
SA
Security Appscan · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0532
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/82595
More from Rational Policy Tester
–
CVE-2013-4062
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain…
–
CVE-2013-4061
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to…
–
CVE-2013-0513
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the…
–
CVE-2013-0512
Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x…
–
CVE-2013-0474
The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to…