CVE-2013-4012

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:N/I:P/A:P
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
ibmwebsphere_portal
8.0.0.0
ibmwebsphere_portal
8.0.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1PM93172
http://www-01.ibm.com/support/docview.wss?uid=swg21660011
https://exchange.xforce.ibmcloud.com/vulnerabilities/85618
http://www-01.ibm.com/support/docview.wss?uid=swg1PM93172
http://www-01.ibm.com/support/docview.wss?uid=swg21660011
https://exchange.xforce.ibmcloud.com/vulnerabilities/85618