CVE-2013-5400
An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.
- Score
- CVSS 2.0 10.0 Critical
- Status
- Modified - psirt@us.ibm.com
- Published
- 2014-02-14
- Last modified
- 2024-08-06
- Weaknesses
- CWE-255
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87296
