CVE-2013-2972

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868.

• CWE-284

• https://exchange.xforce.ibmcloud.com/vulnerabilities/83868VDB Entry, Vendor Advisory
• https://www-01.ibm.com/support/docview.wss?uid=swg21635993Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83868VDB Entry, Vendor Advisory
• https://www-01.ibm.com/support/docview.wss?uid=swg21635993Patch, Vendor Advisory

Published

Jul 11, 2018

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2964Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM…
• CVE-2013-2967Cross-site scripting (XSS) vulnerability in the Administrati…
• CVE-2013-2968An unspecified buffer-read method in IBM Sterling Control Ce…
• CVE-2013-2969Cross-site scripting (XSS) vulnerability in IBM Sterling Con…
• CVE-2013-2970Unspecified vulnerability in IBM QRadar Security Information…
• CVE-2013-2971Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2974The BIRT viewer in IBM Tivoli Application Dependency Discove…
• CVE-2013-2976The Administrative console in IBM WebSphere Application Serv…
• CVE-2013-2977Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim…
• CVE-2013-2978Absolute path traversal vulnerability in the server in IBM C…
• CVE-2013-2979Directory traversal vulnerability in IBM Optim Performance M…