Vulnerability Details CVE-2013-5468
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.3%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2013-5468
-
cpe:2.3:a:ibm:algo_one:4.7.0
-
cpe:2.3:a:ibm:algo_one:4.7.1
-
cpe:2.3:a:ibm:algo_one:4.8.0
-
cpe:2.3:a:ibm:algo_one:4.9.0
-
cpe:2.3:a:ibm:algo_one:4.9.1
-
cpe:2.3:a:ibm:algo_one:5.0.0