Multiple IBM Products 'Save Draft' Access Bypass Vulnerability
BID:64751
Info
Multiple IBM Products 'Save Draft' Access Bypass Vulnerability
| Bugtraq ID: | 64751 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-6334 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2014 12:00AM |
| Updated: | Jan 09 2014 12:00AM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple IBM Products 'Save Draft' Access Bypass Vulnerability
Multiple IBM products are prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.
Following products are vulnerable:
IBM Atlas eDiscovery Process Management 6.0.1.5 and prior, 6.0.2
IBM Disposal and Governance Management for IT 6.0.1.5 and prior, 6.0.2
IBM Global Retention Policy and Schedule Management 6.0.1.5 and prior, 6.0.2
Multiple IBM products are prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.
Following products are vulnerable:
IBM Atlas eDiscovery Process Management 6.0.1.5 and prior, 6.0.2
IBM Disposal and Governance Management for IT 6.0.1.5 and prior, 6.0.2
IBM Global Retention Policy and Schedule Management 6.0.1.5 and prior, 6.0.2
Exploit / POC
Multiple IBM Products 'Save Draft' Access Bypass Vulnerability
Attackers can exploit this issue using browser or readily available tools.
Attackers can exploit this issue using browser or readily available tools.
Solution / Fix
Multiple IBM Products 'Save Draft' Access Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.