CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0527

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain sensitive administrative-console information by reading the screen of an unattended workstation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.4%

CVSS Severity

CVSS v2 Score 1.9

References

Products affected by CVE-2013-0527

Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.0

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.0
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.10

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.10
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.2

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.2
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.3

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.3
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.6

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.6
Ibm » Sterling Connect Direct User Interface » Version: 1.4.0.7

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.7
Ibm » Sterling Connect Direct User Interface » Version: 1.5.0.0

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.0
Ibm » Sterling Connect Direct User Interface » Version: 1.5.0.1

cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0527

Products

Pricing

Contact Us