CVE-2013-0470 : HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containi

HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containing asset files via a direct request to a directory URI, as demonstrated by listing image files.

Published 2013-04-05 16:55:02

Updated 2017-08-29 01:33:03

Source IBM Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2013-0470

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-0470

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2013-0470

https://exchange.xforce.ibmcloud.com/vulnerabilities/81336

IBM Netezza Performance Portal 1.0.2 multiple directory information disclosure CVE-2013-0470 Vulnerability Report
http://www-01.ibm.com/support/docview.wss?uid=swg21631945

IBM notice: The page you requested cannot be displayed
Vendor Advisory

Products affected by CVE-2013-0470

IBM » Netezza Performance Portal » Version: 1.0.2
cpe:2.3:h:ibm:netezza_performance_portal:1.0.2:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2013-0470

Exploit prediction scoring system (EPSS) score for CVE-2013-0470

CVSS scores for CVE-2013-0470

CWE ids for CVE-2013-0470

References for CVE-2013-0470

Products affected by CVE-2013-0470