PT-2017-1546 · Ibm · Ibm Websphere Application Server

Publicado 2017-03-20 · Atualizado 2019-10-03 · CVE-2017-1151

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebSphere Application Server versions 8.0 through 9.0

Description The issue is related to insufficient access control in the OpenID Connect (OIDC) and Trust Association Interceptor (TAI) components of the WebSphere Application Server. This could allow a remote attacker to gain elevated privileges on the system.

Recommendations For versions 8.0 through 9.0, update the configuration to properly restrict access control for OpenID Connect and Trust Association Interceptor components to prevent privilege escalation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-00691

CVE-2017-1151

Produtos afetados

Ibm Websphere Application Server

Referências · 6

• https://bdu.fstec.ru/vul/2017-00691 · Nota de Segurança
• http://securitytracker.com/id/1037984 · Nota
• http://ibm.com/support/docview.wss?uid=swg21999293 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1151 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1151 · Aviso do Fabricante
• http://securityfocus.com/bid/96841 · Nota