« Volver al listado

CVE-2013-0652

Estado: ModificadaMedia (5)—

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

GE — Intelligent Platforms Proficy Real-time Information Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0652",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-01-27T18:55:03.413",
  "references": [
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call."
    },
    {
      "lang": "es",
      "value": "GE Intelligent Platforms Proficy Real-Time Information Portal no restringe el acceso a los métodos de una clase Java no especificada, que permite a atacantes remotos obtener una lista de nombres de usuario a través de una llamada RMI."
    }
  ],
  "lastModified": "2026-06-16T23:49:50.870",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "215C26D9-81F4-48F3-9B66-D1F5E8F9E94C"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7331C96-F07B-4212-BFA7-ABC0DAA5A15E"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90BA73F6-F1BC-4815-8B13-4C12DF3BD698"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:3.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E809B65-55C7-41DF-84BD-B184689E4F66"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C286676B-1F44-4A35-A666-5C8947D5DC21"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_real-time_information_portal:3.5:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "651D81FD-2B13-42A7-8351-D153FF5D933C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}