CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2013-39936.5/MEDIUMEPSS 4.8%CISA KEV

2014-07-07

IBM InfoSphere BigInsights Directory Traversal and File Restriction Bypass Vulnerability via API Parameter Manipulation (CVE-2013-3993)

[Affected Scope] IBM InfoSphere BigInsights versions prior to 2.1.0.3

[Impact] Remote authenticated attackers can bypass file and directory restrictions, potentially accessing untrusted data or executing unauthorized code via crafted API parameters.

[Mitigation] Immediately upgrade to IBM InfoSphere BigInsights 2.1.0.3 or later as recommended by the vendor.

cwe-22 directory-traversal api-bypass big-data

Full Advisory & Mitigation