VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 23, 2013· Updated Jun 16, 2026

CVE-2013-5420

CVE-2013-5420

Description

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request.

Affected products

2
  • IBM/Security Access Manager For Enterprise Single Sign On2 versions
    cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2:*:*:*:*:*:*:*
    • (no CPE)range: <= 8.2 (before IMS server Ifix 6)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.