VULNERABILITY INTELLIGENCE
CVE-2013-4012
CVSS score4.9 MEDIUM
EPSS probability1.05%
CISA KEVNot currently listed
Published2013-12-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:P
Description
IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
Primary references
- psirt@us.ibm.com
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108