PT-2008-1642 · Ibm · Ibm Websphere Application Server

Publicado 2008-01-10 · Atualizado 2011-04-07 · CVE-2007-6679

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0.2 through 6.0.2 before Fix Pack 25 IBM WebSphere Application Server version 6.1 before Fix Pack 13

Description The issue is related to security concerns with monitor role users in the Administrative Console. The impact and attack vectors of this issue are unknown.

Recommendations For IBM WebSphere Application Server version 6.1, apply Fix Pack 13 to resolve the issue. For IBM WebSphere Application Server version 6.0.2, apply Fix Pack 25 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-6679

Produtos afetados

Ibm Websphere Application Server

Referências · 9

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6679 · Nota
• http://vupen.com/english/advisories/2008/0241 · Aviso do Fabricante
• http://securitytracker.com/id?1019174 · Nota
• http://secunia.com/advisories/28588 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-6679 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg27006876 · Nota
• http://vupen.com/english/advisories/2007/3955 · Aviso do Fabricante
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only · Aviso do Fabricante