« Volver al listado

CVE-2013-0579

Estado: ModificadaMedia (4.3)—

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0579",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-10T10:55:06.240",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21651990",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83331",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21651990",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83331",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication."
    },
    {
      "lang": "es",
      "value": "Optim E-Business Console en IBM Data Growth Solution para Oracle E-business Suite 6.0 hasta la versión 9.1 permite a atacantes remotos hacerse pasar por usuarios arbitrarios mediante el aprovechamiento de acceso al navegador de un usuario legítimo, (1) anteriormente o (2) después de la autenticación."
    }
  ],
  "lastModified": "2026-06-16T23:49:41.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCFEBBA0-8682-45F5-B14C-F2413C78CA9C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "042FA7EC-2756-4483-B1BC-C1CDA48E5E1B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5D4C6B-FB5F-4471-8D52-8DD5D2A531D7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C96FD2F5-C3A3-4397-A628-AEB9C4CF9413"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5084C06B-25B3-4889-A850-366AC4F64178"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00B5CE9C-2F45-4CB9-AF05-25AEDC7DB0F3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4F5D8D8-9BA0-454E-8298-C954CAC44556"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49A6675C-8467-4D81-A338-F3D943B9C4F5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBF3064D-039C-4161-8B72-39EC7E5F677B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA084A33-2CEE-4896-89C3-B30A219BAD91"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A45655F7-BBFD-41C6-A74D-5076FED0A213"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7FE90E6-8DAC-46EC-A79A-B640866884AE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "157E4DB5-CEF7-446F-AACC-10B1B4EF7C97"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21992A6D-3178-49FE-8FDF-CC98CA09A551"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62EC9BD3-C64E-4B9F-8E72-2B39056F832A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34E05B00-1740-42CD-A8D8-9F70749EF046"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB46D109-DFC4-4265-9CEB-33337A4F7361"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:9.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F6FC629-2802-4A9A-96D2-DDCA045B47BB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}