CVE-2013-4043

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-02-01

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Spss Collaboration And Deployment Services (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828
• http://www-01.ibm.com/support/docview.wss?uid=swg21661169
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86419