CVE-2013-3023

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the network for a session in which HTTP is used. IBM X-Force ID: 84361.

• CWE-200

• http://www-01.ibm.com/support/docview.wss?uid=swg21672388Mitigation, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84361VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21672388Mitigation, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84361VDB Entry, Vendor Advisory

Published

May 24, 2018

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3012Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-3016IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attacke…
• CVE-2013-3017IBM Tivoli Application Dependency Discovery Manager (TADDM) …
• CVE-2013-3018The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Applicat…
• CVE-2013-3020IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Ga…
• CVE-2013-3022Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-3024IBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 o…
• CVE-2013-3025Multiple cross-site scripting (XSS) vulnerabilities in IBM R…
• CVE-2013-3026Buffer overflow in the Lotus Quickr for Domino ActiveX contr…
• CVE-2013-3027Integer overflow in the DWA9W ActiveX control in iNotes in I…
• CVE-2013-3028Multiple buffer overflows in mqm programs in IBM WebSphere M…
• CVE-2013-3029Cross-site request forgery (CSRF) vulnerability in the Admin…