CVE

Id
64000  
CVE No.
CVE-2013-4053  
Status
Candidate  
Description
The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.  
Phase
Assigned (20130607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
632136 64000 CVE-2013-4053 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21647522  View
632137 64000 CVE-2013-4053 AIXAPAR:PM90949  View
632138 64000 CVE-2013-4053 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949  View
632139 64000 CVE-2013-4053 AIXAPAR:PM91521  View
632140 64000 CVE-2013-4053 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521  View
632141 64000 CVE-2013-4053 XF:was-cve20134053-priv-escalation(86505)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24621 JVNDB-2013-006196 IBM InfoSphere Information Server における SQL インジェクションの脆弱性 IBM InfoSphere Information Server には、SQL インジェクションの脆弱性が存在します。 CVE-2013-4058 64000 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006196.html  View