CVE-2013-5391: IBM Mobile Foundation

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.0 Fix Pack 2 make it easier for attackers to defeat cryptographic protection mechanisms by leveraging improper initialization of the pseudo random number generator (PRNG) in Android and use of the Java Cryptography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128.

Affected products

• IBM Mobile Foundation: version 5.0.0.0 only; version 5.0.5.0 only; version 5.0.6.0 only; version 6.0.0.0 only
• IBM Worklight: version 5.0.0.0 only; version 5.0.5.0 only; version 5.0.6.0 only; version 6.0.0.0 only

Published 2018-04-27. Last modified 2026-06-16.