PT-2011-2554 · Ibm · Ibm Lotus Quickr+2

Peter Brauchle · Publicado 2011-01-28 · Atualizado 2017-08-17 · CVE-2011-0679

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.0.1.1 through 7.0.0.0

Description The issue allows remote attackers to obtain sensitive information via a modified message. This could potentially impact systems that rely on IBM WebSphere Portal, such as those using IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal.

Recommendations For IBM WebSphere Portal versions 6.0.1.1 through 7.0.0.0, update to a version outside of the affected range to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-0679

Produtos afetados

Ibm Lotus Quickr

Lotus Web Content Management

Ibm Websphere Portal

Referências · 16

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM24319 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM22159 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0679 · Nota de Segurança
• http://vupen.com/english/advisories/2011/0223 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64890 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM24320 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM22167 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM25191 · Aviso do Fabricante
• http://secunia.com/advisories/43081 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg21460422 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM25698 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM26397 · Aviso do Fabricante
• http://osvdb.org/70688 · Nota
• http://kb.cert.org/vuls/id/375127 · Nota
• http://securityfocus.com/bid/45989 · Nota