Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2013-0529

EPSS 0.23% · P46
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-0529

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Sterling Connect:Direct 浏览器安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Sterling Connect:Direct是美国IBM公司的一套点到点文件传输软件。该软件用于实现企业内和企业间的大容量、安全可靠的文件交付。 IBM Sterling Connect:Direct 1.4.0.11之前的1.4版本和1.5至1.5.0.1版本中的浏览器中存在漏洞，该漏洞源于程序对https会话中的会话cookie没有设置安全标志。远程攻击者可通过在HTTP会话拦截其传输利用该漏洞捕获cookie。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-0529

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-0529

Please Login to view more intelligence information

Same Patch Batch · n/a · 2013-06-21 · 23 CVEs total

CVE-2013-0548IBM Application Manager For Smart Business/ITM 多个跨站脚本漏洞
CVE-2013-3379Cisco TelePresence TC软件权限许可和访问控制漏洞
CVE-2013-3378Cisco TelePresence TC/TE软件输入验证漏洞
CVE-2013-3377Cisco TelePresence TC/TE软件资源管理错误漏洞
CVE-2013-2173WordPress ‘crypt_private()’方法远程拒绝服务漏洞
CVE-2013-3035IBM AIX IPv6包处理远程拒绝服务漏洞
CVE-2013-0534IBM Sametime Connect客户端本地信息泄露漏洞
CVE-2013-0527IBM Sterling Connect:Direct 浏览器安全漏洞
CVE-2013-2961IBM Application Manager for Smart Business/ITM 安全漏洞
CVE-2013-2960IBM Application Manager for Smart Business/ITM 缓冲区溢出漏洞
CVE-2013-0551IBM Application Manager for Smart Business/ITM 拒绝服务漏洞
CVE-2013-3392Cisco WebEx Social 多个跨站请求伪造漏洞
CVE-2013-0536IBM Notes Multi User Profile Cleanup Service 本地提权漏洞
CVE-2013-0523IBM WebSphere Commerce Enterprise 信息泄露漏洞
CVE-2012-6572Drupal 跨站脚本漏洞
CVE-2013-3250WordPress WP Maintenance Mode插件跨站请求伪造漏洞
CVE-2013-2110PHP 基于堆的缓冲区溢出漏洞
CVE-2013-4636PHP 输入验证错误漏洞
CVE-2013-4635PHP 数字错误漏洞
CVE-2013-4615多款Canon打印机存远程拒绝服务漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-0529

No comments yet

Leave a comment