NetSight
medium4.0

CVE-2013-4061

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authent…

Impact

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.

Affected products

VendorProductAffected versions
IbmRational Policy Tester
Versions 8.5.0.0, 8.5.0.1, 8.5.0.2, 8.5.0.3, 8.5.0.4

Weakness classification

References