CVE

Id
66281  
CVE No.
CVE-2013-6334  
Status
Candidate  
Description
IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) do not properly validate sessions, which allows remote attackers to bypass intended access restrictions, and visit PolicyAtlas/ResponseDraftServlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors.  
Phase
Assigned (20131031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644222 66281 CVE-2013-6334 CONFIRM:http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334  View
644223 66281 CVE-2013-6334 BID:64751  View
644224 66281 CVE-2013-6334 URL:http://www.securityfocus.com/bid/64751  View
644225 66281 CVE-2013-6334 OSVDB:101855  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23441 JVNDB-2013-005016 Wireshark の OpenWire 解析機能の epan/dissectors/packet-openwire.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の OpenWire 解析機能の epan/dissectors/packet-openwire.c 内の dissect_openwire_type 関数には、サービス運用妨害 (ループ) 状態にされる脆弱性が存在します。 CVE-2013-6339 66281 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005016.html  View