CVE-2013-6304

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-6304
Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21666093 Patch Vendor Advisory
http://www.securityfocus.com/bid/65929
https://exchange.xforce.ibmcloud.com/vulnerabilities/88535
http://www-01.ibm.com/support/docview.wss?uid=swg21666093 Patch Vendor Advisory
http://www.securityfocus.com/bid/65929
https://exchange.xforce.ibmcloud.com/vulnerabilities/88535
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:2.5.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.9.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:algo_risk_application:4.9.1:*:*:*:*:*:*:*
History

21 Nov 2024, 01:58

Type Values Removed Values Added
References () http://www-01.ibm.com/support/docview.wss?uid=swg21666093 - Vendor Advisory, Patch () http://www-01.ibm.com/support/docview.wss?uid=swg21666093 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/65929 - () http://www.securityfocus.com/bid/65929 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/88535 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/88535 -
Information

Published : 2014-03-06 11:55

Updated : 2025-04-12 10:46

NVD link : CVE-2013-6304

Mitre link : CVE-2013-6304

CVE.ORG link : CVE-2013-6304

JSON object : View

Products Affected

ibm

  • algo_one
  • algo_risk_application
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')