CVE-2013-6728 The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary dir...
MediumCVSS 5.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere dashboard framework | = 6.1.5 | No fix listed |
| ibm websphere dashboard framework | = 7.0.1 | No fix listed |
References
- LO78265 vendor-advisory
- LO78266 vendor-advisory
- www-01.ibm.com vendor-advisory
- ibm-websphere-cve20136728-file-access(89283) vdb-entry