CVE-2013-6305 - IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key

Back Back to CVE browser

MEDIUM

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key

Published Jan 21, 2014

4.3

MEDIUM

CVSS 2.0

EPSS 0.62%

Description

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (3)

http://osvdb.org/102262
vdb-entryx_refsource_OSVDB
http://www-01.ibm.com/support/docview.wss?uid=isg3T1020528
x_refsource_CONFIRMVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88536
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/102262		vdb-entryx_refsource_OSVDB
http://www-01.ibm.com/support/docview.wss?uid=isg3T1020528		x_refsource_CONFIRMVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88536		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Jan 21, 2014

Updated Aug 6, 2024

Reserved Oct 31, 2013

Link CVE-2013-6305

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-6305

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-6305