medium6.5Known exploited
CVE-2013-3993
IBM InfoSphere BigInsights Invalid Input Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-05-25. Federal due date: 2022-06-15.
The impacted product is end-of-life and should be disconnected if still in use.
Impact
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Infosphere Biginsights | before 2.1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://secunia.com/advisories/59676
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445
- http://www.securityfocus.com/bid/68449
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
- http://secunia.com/advisories/59676
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445
- http://www.securityfocus.com/bid/68449
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993