CVE-2013-6334

Published: Jan 10, 2014Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) do not properly validate sessions, which allows remote attackers to bypass intended access restrictions, and visit PolicyAtlas/ResponseDraftServlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors.

Affected (7)

Products: Ibm: Atlas Ediscovery Process Management, Atlas Suite, Disposal And Governance Management For It, Global Retention Policy And Schedule Management

Ibm

4 products

Atlas Ediscovery Process Management

Atlas Suite

Disposal And Governance Management For It

Global Retention Policy And Schedule Management

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Atlas Ediscovery Process Management	Up to 6.0.1.5
Ibm Atlas Ediscovery Process Management	Version 6.0.2
Ibm Atlas Suite	All versions
Ibm Disposal And Governance Management For It	Up to 6.0.1.5
Ibm Disposal And Governance Management For It	Version 6.0.2
Ibm Global Retention Policy And Schedule Management	Up to 6.0.1.5
Ibm Global Retention Policy And Schedule Management	Version 6.0.2