CVE-2013-0600

EUVD-2013-0611
Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
ibmwebsphere_datapower_xc10_appliance_firmware
2.0.0.0
ibmwebsphere_datapower_xc10_appliance_firmware
2.0.0.1
ibmwebsphere_datapower_xc10_appliance_firmware
2.0.0.2
ibmwebsphere_datapower_xc10_appliance_firmware
2.0.0.3
ibmwebsphere_datapower_xc10_appliance_firmware
2.1.0.0
ibmwebsphere_datapower_xc10_appliance_firmware
2.1.0.1
ibmwebsphere_datapower_xc10_appliance_firmware
2.1.0.2
ibmwebsphere_datapower_xc10_appliance_firmware
2.1.0.3
ibmwebsphere_datapower_xc10_appliance
-
𝑥
= Vulnerable software versions
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IC91726
http://www-01.ibm.com/support/docview.wss?uid=swg21636324
http://www-01.ibm.com/support/docview.wss?uid=swg1IC91726
http://www-01.ibm.com/support/docview.wss?uid=swg21636324