Unscored severity · published Sep 23, 2013
CVE-2013-4820
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0,…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP4 allows remote authenticated users to obtain sensitive information via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Icewall Federation Agent · HP
8.0 · source: NVD
IF
Icewall File Manager · HP
3.0; 3.0; 3.0; 3.0; 3.0 · source: NVD
IJ
Icewall Java Agent Library · HP
8.0; 8.0; 10.0 · source: NVD
IS
Icewall Smart Device Option · HP
10.0 · source: NVD
IS
Icewall Sso Agent · HP
8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +5 more · source: NVD
IS
Icewall Sso Agent Option · HP
8.0; 8.0; 10.0; 10.0 · source: NVD
IS
Icewall Sso Saml2 Option · HP
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4820
Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632
support.hpe.com
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03918632
More from Icewall Federation Agent
9.8
CVE-2016-2182
The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service…
9.8
CVE-2016-4448
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors
7.5
CVE-2016-9597
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a…
7.5
CVE-2016-4447
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application…
7.5
CVE-2016-3705
The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows…