PT-2016-1321 · Ibm · Ibm Websphere Portal

Publicado 2016-02-29 · Atualizado 2016-03-02 · CVE-2015-7455

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF29 IBM WebSphere Portal versions 8.0.x before 8.0.0.1 CF20 IBM WebSphere Portal versions 8.5.x before 8.5.0.0 CF09

Description The issue is related to insufficient access control in the user interface of the IBM WebSphere Portal server application. This can be exploited by a remote attacker to modify content items using the user interface.

Recommendations For versions 7.x through 7.0.0.2 CF29, update to a version after 7.0.0.2 CF29 to resolve the issue. For versions 8.0.x before 8.0.0.1 CF20, update to a version after 8.0.0.1 CF20 to resolve the issue. For versions 8.5.x before 8.5.0.0 CF09, update to a version after 8.5.0.0 CF09 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2016-00620

CVE-2015-7455

Produtos afetados

Ibm Websphere Portal

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-7455 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-00620 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg21975358 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7455 · Nota