IBM WebSphere Application Server CVE-2013-5414 Security Bypass Vulnerability

Bugtraq ID:	63781
Class:	Unknown
CVE:	CVE-2013-5414
Remote:	Yes
Local:	No
Published:	Nov 11 2013 12:00AM
Updated:	Jan 16 2014 05:35PM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 7.0 21 IBM Websphere Application Server 7.0 .9 IBM Websphere Application Server 7.0 .8 IBM Websphere Application Server 7.0 .2 IBM Websphere Application Server 7.0 .13 IBM Websphere Application Server 7.0 .12 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 8.0 IBM Websphere Application Server 7.0.0.7 IBM Websphere Application Server 7.0.0.6 IBM Websphere Application Server 7.0.0.5 IBM Websphere Application Server 7.0.0.4 IBM Websphere Application Server 7.0.0.23 IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.15 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.13 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 6.1
Not Vulnerable:

IBM WebSphere Application Server CVE-2013-5414 Security Bypass Vulnerability

IBM WebSphere Application Server is prone to a security-bypass vulnerability.

An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions with elevated privileges.

IBM WebSphere Application Server versions 8.5 through 8.5.5.0, 8.0 through 8.0.0.7, and 7.0 through 7.0.0.29 are vulnerable.

IBM WebSphere Application Server CVE-2013-5414 Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

IBM WebSphere Application Server CVE-2013-5414 Security Bypass Vulnerability

References: