CVE:CVE-2013-6334
CNNVD:CNNVD-201401-138
IBM Atlas eDiscovery Process Management等都是美国IBM公司的信息生命周期治理解决方案中的产品，该方案能够跨信息生命周期治理内容，包括归档、防御性处理（defensible disposal）、记录和eDiscovery。
IBM Atlas Suite (又名Atlas Policy Suite)中存在输入验证漏洞，该漏洞源于程序没有正确验证会话。远程攻击者可利用该漏洞绕过既定的访问限制，进而访问PolicyAtlas/ResponseDraftServlet应用程序(又名Compliance Questionnaire Save Draft servlet)。以下版本受到影响：IBM Atlas eDiscovery Process Management 6.0.1.5及之前的版本和6.0.2版本；Disposal and Governance Management for IT 6.0.1.5及之前的版本和6.0.2版本；Global Retention Policy and Schedule Management 6.0.1.5及之前的版本和6.0.2版本。
solution:Upgrade ibm atlas_ediscovery_process_management to a higher version than 6.0.1.5,6.0.2,and avoid the version (,6.0.1.5],6.0.2; Upgrade ibm atlas_suite to a higher version than -; Upgrade ibm disposal_and_governance_management_for_it to a higher version than 6.0.1.5,6.0.2,and avoid the version (,6.0.1.5],6.0.2; Upgrade ibm global_retention_policy_and_schedule_management to a higher version than 6.0.1.5,6.0.2,and avoid the version (,6.0.1.5],6.0.2