CVE-2013-0513 Privilege escalation in n/a

What is CVE-2013-0513?

CVE-2013-0513 is a high-severity vulnerability in n/a, published on 29 Mar 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path Enumeration" vulnerability.

Which versions are affected by CVE-2013-0513?

It affects 2 products.

Products include Ibm Rational Policy Tester, Ibm Security Appscan.

How do I fix CVE-2013-0513?

No fix has been published for CVE-2013-0513 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-0513 being exploited?

There is no known exploitation of CVE-2013-0513 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-4062 Weak cryptography in n/a Medium 6.8
• CVE-2013-0532 Cross-site request forgery in n/a Medium 6.8
• CVE-2012-0738 Security feature bypass in n/a Medium 5.8
• CVE-2012-0741 Security feature bypass in n/a Medium 5.8
• CVE-2013-0473 Cross-site scripting in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hmcx-gx3h-rc8r.