PT-2006-4977 · Ibm · Ibm Websphere Application Server

Publicado 2006-08-14 · Atualizado 2011-03-08 · CVE-2006-4136

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 6.1.0.1

Description The issue involves multiple unspecified vulnerabilities with unspecified impact and attack vectors. These vectors include (1) "SOAP requests and responses", (2) mbean, and (3) ThreadIdentitySupport, and possibly others.

Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to SOAP requests and responses, mbean, and ThreadIdentitySupport until a patch is applied. Avoid using vulnerable components if possible, to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-264

CWE-200

Identificadores relacionados

CVE-2006-4136

Produtos afetados

Ibm Websphere Application Server

Referências · 9

• http://securityfocus.com/bid/19463 · Correção
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-4136 · Nota de Segurança
• http://vupen.com/english/advisories/2006/3262 · Nota
• http://secunia.com/advisories/21440 · Aviso do Fabricante
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only · Correção, Aviso do Fabricante
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only · Correção, Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4136 · Nota
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only · Correção, Aviso do Fabricante