CVE-2013-3993

6.5

CVSS
Medium

PUBLISHED

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted...

Exploited in the wild Used in malware Remote Low complexity No user interaction

Vendor: IBM
Product: InfoSphere BigInsights
Published: Jul 07, 2014
EPSS: —

Description

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

cisa malware ransomware

CVSS scores

CVSS v3.1 6.5 Medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 3.5

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitation status

Exploited in the wild

Recorded 2022-05-25 00:00:00 UTC · Source

Used in malware

Recorded 2022-05-25 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	May 25, 2022

Vulnerability detail