VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 18, 2013· Updated Jun 16, 2026

CVE-2013-4006

CVE-2013-4006

Description

IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • IBM/Websphere Application Server4 versions
    cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile:*:*:*:*:*
  • IBM/WebSphere Application Server Liberty Profilellm-fuzzy
    Range: <8.5.5.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.