PT-2011-1393 · Ibm · Ibm Websphere Application Server

Alejandro Rodriguez + 2 · Publicado 2011-07-18 · Atualizado 2018-10-10 · CVE-2010-3271

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0.13 and earlier

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console of IBM WebSphere Application Server. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests, specifically those that disable certain security options. This can be achieved via an Edit action to "console/adminSecurityDetail.do" followed by a save action to "console/syncworkspace.do".

Recommendations For IBM WebSphere Application Server versions 7.0.0.13 and earlier, consider disabling access to the "console/adminSecurityDetail.do" and "console/syncworkspace.do" endpoints until a fix is available. Restrict the use of the administrative console to minimize the risk of exploitation.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2010-3271

Produtos afetados

Ibm Websphere Application Server

Referências · 8

• 🔥 https://exploit-db.com/exploits/17404 · Exploit
• 🔥 http://coresecurity.com/content/IBM-WebSphere-CSRF · Exploit
• 🔥 http://exploit-db.com/exploits/17404 · Exploit
• http://securityreason.com/securityalert/8281 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3271 · Nota
• http://securityfocus.com/bid/48305 · Nota
• http://securityfocus.com/archive/1/518465/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3271 · Nota de Segurança