SecuritySpace - CVE-2013-4053

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-4053

Description: The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-4053
AIX APAR: PM90949
http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949
AIX APAR: PM91521
http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521
XForce ISS Database: was-cve20134053-priv-escalation(86505)
https://exchange.xforce.ibmcloud.com/vulnerabilities/86505

CVE ID:	CVE-2013-4053
Description:	The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4053 AIX APAR: PM90949 http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949 AIX APAR: PM91521 http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521 XForce ISS Database: was-cve20134053-priv-escalation(86505) https://exchange.xforce.ibmcloud.com/vulnerabilities/86505