PT-2007-4669 · Ibm · Ibm Websphere Application Server

Publicado 2007-06-26 · Atualizado 2008-11-15 · CVE-2007-3397

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 6.0.2.21 IBM WebSphere Application Server versions 6.1.x prior to 6.1.0.9

Description The issue allows remote attackers to potentially obtain sensitive information due to the web container sending response data intended for a different request under certain circumstances after a closed connection error.

Recommendations For versions prior to 6.0.2.21, update to version 6.0.2.21 or later. For versions 6.1.x prior to 6.1.0.9, update to version 6.1.0.9 or later.

Correção

Identificadores relacionados

CVE-2007-3397

Produtos afetados

Ibm Websphere Application Server

Referências · 8

• http://securityfocus.com/bid/24608 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3397 · Nota
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24015854 · Correção, Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21261071 · Nota
• http://osvdb.org/41644 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3397 · Nota de Segurança
• http://securitytracker.com/id?1018288 · Nota
• http://secunia.com/advisories/25817 · Aviso do Fabricante