NVD

Id
41406  
Name
CVE-2013-6334  
Description
IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) do not properly validate sessions, which allows remote attackers to bypass intended access restrictions, and visit PolicyAtlas/ResponseDraftServlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-01-10  
Modified Date
2015-07-28  
Seq
2013-6334  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209150 41406 CVE-2013-6334 http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334  View
209151 41406 CVE-2013-6334 64751  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12144 JVNDB-2014-001019 IBM Atlas Suite の複数の製品におけるアクセス制限を回避される脆弱性 IBM Atlas Suite (別名 Atlas Policy Suite) の IBM Atlas eDiscovery Process Management、Disposal and Governance Management for IT、および Global Retention Policy and Schedule Management は、セッションを適切に検証しないため、アクセス制限を回避され、PolicyAtlas/ResponseDraftServlet (別名 Compliance Questionnaire Save Draft サーブレット) にアクセスされる脆弱性が存在します。 CVE-2013-6334 66276 CVE-2013-6334 41406 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001019.html 2014-01-09 2014-01-14 View