VULNERABILITY INTELLIGENCE

CVE-2013-0527

CVSS score1.9 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2013-06-21
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N

Description

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain sensitive administrative-console information by reading the screen of an unattended workstation.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references