Vulnerabilities > CVE-2013-0513 - Unspecified vulnerability in IBM Rational Policy Tester and Security Appscan

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

ibm

NVD

Published: 2013-03-29

Updated: 2024-11-21

Summary

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path Enumeration" vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Security Appscan 8.0.0.0 IBM Security Appscan 8.5.0.0 IBM Security Appscan 5.6.0.0 IBM Security Appscan 8.6.0.2 IBM Security Appscan 8.5.0.1 IBM Security Appscan 8.0.1.0 IBM Security Appscan 8.0.11 IBM Security Appscan 8.0.0.2 IBM Security Appscan 8.6.0.0 IBM Security Appscan 8.0.0.1 IBM Security Appscan 8.6.0.1 IBM Security Appscan 8.0.1.1 IBM Rational Policy Tester 8.0.0.0 IBM Rational Policy Tester 8.5.0.3 IBM Rational Policy Tester 5.6.0.0 IBM Rational Policy Tester 8.0.1.0 IBM Rational Policy Tester 8.0.0.2 IBM Rational Policy Tester 8.5.0.1 IBM Rational Policy Tester 8.5.0.0 IBM Rational Policy Tester 8.0.1.1 IBM Rational Policy Tester 8.5.0.2 IBM Rational Policy Tester 8.0.0.1	22

Summary

Vulnerable Configurations

References