CVE-2013-4061

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-09 · updated 2026-06-16
Weakness: CWE-287

Description

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.

Affected products

IBM Rational Policy Tester: 8.5.0.0, 8.5.0.1, 8.5.0.2, 8.5.0.3, 8.5.0.4

References

http://www-01.ibm.com/support/docview.wss?uid=swg21648481
https://exchange.xforce.ibmcloud.com/vulnerabilities/86585
http://www-01.ibm.com/support/docview.wss?uid=swg21648481
https://exchange.xforce.ibmcloud.com/vulnerabilities/86585

Get alerted when CVE-2013-4061 or the next vulnerability affects your stack