Access Control Bypass Vulnerability in IBM SPSS Modeler
CVE-2013-6739

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Spss Modeler
Vendor
CVE Published:
27 April 2018

What is CVE-2013-6739?

This vulnerability in IBM SPSS Modeler prior to version 16 on UNIX allows remote authenticated users to bypass intended access restrictions by exploiting an SSO token. This can lead to unauthorized actions within the application, potentially exposing sensitive data.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/89855
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21663960
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.