CVE-2013-6329

ALTO 7.8CVE-2013-6329 · Published 17/12/2013 · updated 17/06/2026

Em resumo

CVE-2013-6329 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta content manager ondemand for multiplatforms (ibm), security access manager for web (ibm).
Chance de exploração nos próximos 30 dias (EPSS): 3.2%, maior que 88.0% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
content manager ondemand for multiplatforms ibm	`= 8.5= 9.0`	No fix yet
security access manager for web ibm	`= 6.0= 6.1= 6.1.1= 7.0`	No fix yet

Description

IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.

References

secunia.com/advisories/56058
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Patch
www-01.ibm.com/support/docview.wss · Patch
www-01.ibm.com/support/docview.wss · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/88939

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free