{"id":"CVE-2013-2976","aliases":["EUVD-2013-2915","GHSA-828x-pwwm-pchf"],"status":"published","title":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...","description":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00354,"percentile":0.29325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2013-08-21T21:00:00Z","modified":"2026-06-16T23:54:18Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/83965","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21644047","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM79992","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2976"},{"url":"https://github.com/advisories/GHSA-828x-pwwm-pchf"}],"sources":{"cve":[{"id":"CVE-2013-2976","description":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2013-08-21T21:00:00Z","modified":"2024-08-06T15:52:21.987Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2915","description":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2013-08-21T21:00:00Z","modified":"2024-08-06T15:52:21Z","updated_at":"2026-11-03T01:56:36.63113Z"}],"ghsa":[{"id":"GHSA-828x-pwwm-pchf","title":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...","description":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2022-05-17T01:35:53Z","modified":"2023-02-03T05:04:38Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:35.806518Z"}],"nvd":[{"id":"CVE-2013-2976","description":"The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 does not properly perform caching, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2013-08-21T21:55:06.1Z","modified":"2026-06-16T23:54:18.683Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:35.248411Z"}]}}