IBM WebSphere Portal 'wcm.path.traversal.security' Security Bypass Vulnerability

Bugtraq ID:	65955
Class:	Access Validation Error
CVE:	CVE-2013-6730
Remote:	Yes
Local:	No
Published:	Mar 03 2014 12:00AM
Updated:	Mar 03 2014 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 7.0 IBM Websphere Portal 6.1.5 IBM Websphere Portal 8.0.0.1 IBM Websphere Portal 8.0.0.0 IBM Websphere Portal 7.0.0.2 IBM Websphere Portal 7.0.0.1 IBM Websphere Portal 6.1.5.3 IBM Websphere Portal 6.1.5.2 IBM Websphere Portal 6.1.5.1 IBM Websphere Portal 6.1.0.6 IBM Websphere Portal 6.1.0.5 IBM Websphere Portal 6.1.0.4 IBM Websphere Portal 6.1.0.0
Not Vulnerable:

IBM WebSphere Portal 'wcm.path.traversal.security' Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions and gain access to sensitive information; this may aid in launching further attacks.

IBM WebSphere Portal versions 6.1.0.0 through 6.1.0.6, 6.1.5.0 through 6.1.5.3, 7.0.0 through 7.0.0.2, and 8.0.0 through 8.0.0.1 are vulnerable.

IBM WebSphere Portal 'wcm.path.traversal.security' Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Portal 'wcm.path.traversal.security' Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Portal 'wcm.path.traversal.security' Security Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• WebSphere Portal Homepage (IBM)
  
• Fix available for Improper Access Control Checks on Search Results if WCM Path T (IBM)