CVE-2013-2961
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to perform unspecified redirection of HTTP requests, and bypass the proxy-server configuration, via crafted HTTP traffic.
El servidor web interno en el componente Basic Services en IBM Tivoli Monitoring (ITM) v6.2.0 hasta FP3, v6.2.1 hasta FP4, v6.2.2 hasta FP9, y v6.2.3 anterior a FP3, como se utilizaba en IBM Application Manager para Smart Business (Tivoli Foundations Application Manager) v1.2.1 anterior a v1.2.1.0-TIV-IAMSB-FP0004 y otros productos, permite a atacantes remotos llevar a cabo redirecciones HTTP no especificadas, y eludir la configuración proxy-server, mediante tráfico HTTP especialmente diseñado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-04-12 CVE Reserved
- 2013-06-21 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21635080 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/83725 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg21640752 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.0 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.0.1 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.0.2 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.0.3 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.1 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.1.1 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.1.2 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.1.3 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.1.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.1.4 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.1.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.1 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.2 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.3 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.4 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.5 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.6 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.7 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.8 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.8" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.2.9 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.2.9" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.3 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.3.1 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.3.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Monitoring Search vendor "Ibm" for product "Tivoli Monitoring" | 6.2.3.2 Search vendor "Ibm" for product "Tivoli Monitoring" and version "6.2.3.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Application Manager For Smart Business Search vendor "Ibm" for product "Application Manager For Smart Business" | 1.2.1 Search vendor "Ibm" for product "Application Manager For Smart Business" and version "1.2.1" | - |
Affected
| ||||||