{"id":"CVE-2013-4067","aliases":["EUVD-2013-3998","GHSA-w97w-3q7r-qmwm"],"status":"published","title":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers...","description":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01168,"percentile":0.67584,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-10-02T22:00:00Z","modified":"2026-06-16T23:56:33Z","products":[{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"http://www.securityfocus.com/bid/62768","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21651343","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/86598","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4067"},{"url":"https://github.com/advisories/GHSA-w97w-3q7r-qmwm"}],"sources":{"cve":[{"id":"CVE-2013-4067","description":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.","status":"published","published":"2013-10-02T22:00:00Z","modified":"2024-08-06T16:30:49.916Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-3998","description":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.","status":"published","published":"2013-10-02T22:00:00Z","modified":"2024-08-06T16:30:49Z","updated_at":"2026-11-03T01:56:33.227006Z"}],"ghsa":[{"id":"GHSA-w97w-3q7r-qmwm","title":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers...","description":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.","status":"published","published":"2022-05-17T01:33:26Z","modified":"2023-02-03T05:04:38Z","updated_at":"2026-11-02T14:53:35.806518Z"}],"nvd":[{"id":"CVE-2013-4067","description":"IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.","status":"published","published":"2013-10-02T22:55:23.603Z","modified":"2026-06-16T23:56:33.983Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:38.715467Z"}]}}