CVE-2013-4053
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD
Description
The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.
Affected (87)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.5.0.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0.0.10 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0.0.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.1.0.0 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.1.0.11 |
References (8)
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.