Unscored severity · published May 28, 2013
CVE-2013-0599
IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain…
–
CVSS
2.2%
EPSS
No
On KEV
Description
IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Rational Directory Server · Ibm
through 5.1.1.2; 5.1.1; 5.1.1.1; through 5.2.1; 5.2; 5.2.0.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0599
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0599
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21637151
www.securityfocus.com
http://www.securityfocus.com/bid/60107
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83613
More from Rational Directory Server
–
CVE-2014-3089
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0…
–
CVE-2012-2203
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for…
–
CVE-2012-2191
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data…