IBM InfoSphere Optim Data Growth CVE-2013-0577 Security Bypass Vulnerability

Bugtraq ID:	62859
Class:	Access Validation Error
CVE:	CVE-2013-0577
Remote:	Yes
Local:	No
Published:	Oct 04 2013 12:00AM
Updated:	Oct 04 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 9.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 8.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.2 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.0 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.0
Not Vulnerable:

IBM InfoSphere Optim Data Growth CVE-2013-0577 Security Bypass Vulnerability

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions on the affected application. This may aid in further attacks.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.0 through versions 9.1 are vulnerable.

IBM InfoSphere Optim Data Growth CVE-2013-0577 Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

IBM InfoSphere Optim Data Growth CVE-2013-0577 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Optim Data Growth CVE-2013-0577 Security Bypass Vulnerability

References:

• InfoSphere Optim Homepage (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Infosphere Optim Data Growth (IBM)