CVE-2013-6730

medium

Description

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item within search results.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/89363

http://www-01.ibm.com/support/docview.wss?uid=swg21665915

http://www-01.ibm.com/support/docview.wss?uid=swg1PI07185

Details

Source: Mitre, NVD

Published: 2014-03-04

Updated: 2017-08-29

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium