Unscored severity · published Aug 6, 2013
CVE-2013-3992
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Infosphere Biginsights · Ibm
2.0.0.0; 2.1.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3992
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3992
osvdb.org
http://osvdb.org/95943
secunia.com
http://secunia.com/advisories/54447
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21645804
www.securityfocus.com
http://www.securityfocus.com/bid/61604
www.securitytracker.com
http://www.securitytracker.com/id/1028883
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84981
More from Infosphere Biginsights
6.5
CVE-2013-3993
IBM InfoSphere BigInsights Invalid Input Vulnerability
7.4
CVE-2015-1947
Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan…
7.3
CVE-2015-1836
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect…
7.3
CVE-2015-1772
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products,…
6.5
CVE-2014-4782
IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service