PT-2008-1642 · Ibm · Ibm Websphere Application Server

Published 2008-01-10 · Updated 2011-04-07 · CVE-2007-6679

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0.2 through 6.0.2 before Fix Pack 25 IBM WebSphere Application Server version 6.1 before Fix Pack 13

Description The issue is related to security concerns with monitor role users in the Administrative Console. The impact and attack vectors of this issue are unknown.

Recommendations For IBM WebSphere Application Server version 6.1, apply Fix Pack 13 to resolve the issue. For IBM WebSphere Application Server version 6.0.2, apply Fix Pack 25 to resolve the issue.

Fix

Related Identifiers

CVE-2007-6679

Affected Products

Ibm Websphere Application Server

References · 9

• http://vupen.com/english/advisories/2008/0241 · Vendor Advisory
• http://secunia.com/advisories/28588 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6679 · Security Note
• http://vupen.com/english/advisories/2007/3955 · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6679 · Note
• http://securitytracker.com/id?1019174 · Note
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg27006876 · Note