CVE-2013-6734

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-22 · updated 2026-06-17
Weakness: CWE-264

Description

IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container.

Affected products

IBM Websphere Extreme Scale Client: through 8.6.0.4; 7.0.0.0, 7.1.0.0, 7.1.0.2, 7.1.0.3, 7.1.1.0, 7.1.1.1 (+8)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341
http://www-01.ibm.com/support/docview.wss?uid=swg21664641
https://exchange.xforce.ibmcloud.com/vulnerabilities/89397
http://www-01.ibm.com/support/docview.wss?uid=swg1PI06341
http://www-01.ibm.com/support/docview.wss?uid=swg21664641
https://exchange.xforce.ibmcloud.com/vulnerabilities/89397

Get alerted when CVE-2013-6734 or the next vulnerability affects your stack