PT-2006-3392 · Ibm · Ibm Websphere Application Server

Snob

·

Publicado

2006-05-17

·

Atualizado

2018-10-18

·

CVE-2006-2431

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 5.0.2 and earlier IBM WebSphere Application Server versions 5.1.x before 5.1.1.12 IBM WebSphere Application Server versions 6.0.2 up to 6.0.2.7
Description A cross-site scripting (XSS) issue exists in the 500 Internal Server Error page on the SOAP port, allowing remote attackers to inject arbitrary web script or HTML via the URI contained in a FAULTACTOR element.
Recommendations For IBM WebSphere Application Server versions 5.0.2 and earlier, update to a version later than 5.0.2. For IBM WebSphere Application Server versions 5.1.x before 5.1.1.12, update to version 5.1.1.12 or later. For IBM WebSphere Application Server versions 6.0.2 up to 6.0.2.7, update to a version later than 6.0.2.7.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-2431

Produtos afetados

Ibm Websphere Application Server