QwikSec

Security Database

CVE

CWE

Training

CVE-2013-0513

Published: Mar 29, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path Enumeration" vulnerability.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www-01.ibm.com/support/docview.wss?uid=swg21631304

x_refsource_CONFIRM

appscan-svc-path-priv-esc(82594)

vdb-entry

x_refsource_XF

http://www-01.ibm.com/support/docview.wss?uid=swg21626264

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.