IBM InfoSphere Optim Data Growth for Oracle E-Business Suite Information Disclosure Vulnerability

Bugtraq ID:	60220
Class:	Design Error
CVE:	CVE-2013-2959
Remote:	Yes
Local:	No
Published:	May 14 2013 12:00AM
Updated:	May 14 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 9.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 8.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.2 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.0 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.0
Not Vulnerable:	IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 9.1.0.3

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite Information Disclosure Vulnerability

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite is prone to an information-disclosure vulnerability because it fails to properly secure credentials of login request.

Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.0 through 9.1 are affected.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite Information Disclosure Vulnerability

Attackers can use readily available utilities to exploit this issue.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite Information Disclosure Vulnerability

References:

• InfoSphere Optim Homepage (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM InfoSphere Optim Data Growth (IBM)