CVE-2013-6730

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-04 · updated 2026-06-17
Weakness: CWE-264

Description

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item within search results.

Affected products

IBM WebSphere Portal: 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 (+10)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI07185
http://www-01.ibm.com/support/docview.wss?uid=swg21665915
https://exchange.xforce.ibmcloud.com/vulnerabilities/89363
http://www-01.ibm.com/support/docview.wss?uid=swg1PI07185
http://www-01.ibm.com/support/docview.wss?uid=swg21665915
https://exchange.xforce.ibmcloud.com/vulnerabilities/89363

Get alerted when CVE-2013-6730 or the next vulnerability affects your stack