PT-2009-4540 · Ibm · Ibm Websphere Application Server

Publicado 2009-08-13 · Atualizado 2017-08-17 · CVE-2009-2087

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.25 IBM WebSphere Application Server versions 7.0 before 7.0.0.5

Description The issue involves weak password obfuscation in the Web Services functionality of IBM WebSphere Application Server, specifically under certain circumstances with the ibm-webservicesclient-bind.xmi file and custom password encryption. This weakness can be exploited by local users to cause a denial of service, resulting in deployment failure, via unspecified vectors.

Recommendations For IBM WebSphere Application Server version 6.1 before 6.1.0.25, update to version 6.1.0.25 or later. For IBM WebSphere Application Server version 7.0 before 7.0.0.5, update to version 7.0.0.5 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-2087

Produtos afetados

Ibm Websphere Application Server

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2087 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275 · Aviso do Fabricante
• http://secunia.com/advisories/34461 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52078 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-2087 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463 · Correção