CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855.

• CWE-284

• http://www-01.ibm.com/support/docview.wss?uid=swg21663960Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89855VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21663960Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89855VDB Entry, Vendor Advisory

Published

Apr 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6732Cross-site scripting (XSS) vulnerability in the server in IB…
• CVE-2013-6733Cross-site scripting (XSS) vulnerability in the Web Applicat…
• CVE-2013-6734IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does …
• CVE-2013-6735IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x throug…
• CVE-2013-6737IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x be…
• CVE-2013-6738Cross-site scripting (XSS) vulnerability in IBM SmartCloud A…
• CVE-2013-6741IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.2014031…
• CVE-2013-6742The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and…
• CVE-2013-6743Cross-site scripting (XSS) vulnerability in the Meeting Serv…
• CVE-2013-6744The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 befo…
• CVE-2013-6745Cross-site scripting (XSS) vulnerability in the IMS server b…
• CVE-2013-6746Cross-site scripting (XSS) vulnerability in FileNet P8 Platf…