PT-2015-2599 · Ibm · Ibm Websphere Portal

Publicado 2015-10-29 · Atualizado 2016-12-07 · CVE-2015-4997

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal version 8.5.0 before CF08

Description The issue is related to insufficient access control in the user interface of the IBM WebSphere Portal server application, allowing remote attackers to bypass intended access restrictions via a crafted request. This can enable a remote attacker to circumvent existing access restrictions using a specially formed request.

Recommendations For IBM WebSphere Portal version 8.5.0 before CF08, apply Cumulative Fix 08 or a later fix to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-11964

CVE-2015-4997

Produtos afetados

Ibm Websphere Portal

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4997 · Nota
• https://bdu.fstec.ru/vul/2015-11964 · Nota de Segurança
• http://securitytracker.com/id/1033982 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4997 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21968474 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI47694 · Aviso do Fabricante