CVE-2013-5430 : The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, wh

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.

Published 2013-10-28 03:42:30

Updated 2017-08-29 01:33:47

Source IBM Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2013-5430

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 45 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-5430

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:N	8.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2013-5430

https://exchange.xforce.ibmcloud.com/vulnerabilities/87562

IBM AppScan Enterprise unauthorized Jazz Team Server access CVE-2013-5430 Vulnerability Report
http://www-01.ibm.com/support/docview.wss?uid=swg21653287

IBM Security Bulletin: Multiple vulnerabilities in IBM Security AppScan Enterprise (CVE-2013-4062, CVE-2013-4061, CVE-2013-5430, CVE-2013-3989)
Vendor Advisory

CVEs referencing this url

Products affected by CVE-2013-5430

IBM » Security Appscan » Version: 8.0.0.0 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.5.0.0 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.0.0.1 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.6.0.0 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.5.0.1 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.0.1.0 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.0.1.1 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.0.0.2 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.6.0.1 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.6.0.2 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.0.11 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.7.0.1 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.7.0.1:-:enterprise:*:*:*:*:*
Matching versions
IBM » Security Appscan » Version: 8.7.0.0 Enterprise Edition
cpe:2.3:a:ibm:security_appscan:8.7.0.0:-:enterprise:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2013-5430

Exploit prediction scoring system (EPSS) score for CVE-2013-5430

CVSS scores for CVE-2013-5430

CWE ids for CVE-2013-5430

References for CVE-2013-5430

Products affected by CVE-2013-5430