PT-2011-1393 · Ibm · Ibm Websphere Application Server

Alejandro Rodriguez + 2 · Published 2011-07-18 · Updated 2018-10-10 · CVE-2010-3271

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0.13 and earlier

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console of IBM WebSphere Application Server. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests, specifically those that disable certain security options. This can be achieved via an Edit action to "console/adminSecurityDetail.do" followed by a save action to "console/syncworkspace.do".

Recommendations For IBM WebSphere Application Server versions 7.0.0.13 and earlier, consider disabling access to the "console/adminSecurityDetail.do" and "console/syncworkspace.do" endpoints until a fix is available. Restrict the use of the administrative console to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2010-3271

Affected Products

Ibm Websphere Application Server

References · 8

• 🔥 https://exploit-db.com/exploits/17404 · Exploit
• 🔥 http://coresecurity.com/content/IBM-WebSphere-CSRF · Exploit
• 🔥 http://exploit-db.com/exploits/17404 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3271 · Security Note
• http://securityreason.com/securityalert/8281 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3271 · Note
• http://securityfocus.com/bid/48305 · Note
• http://securityfocus.com/archive/1/518465/100/0/threaded · Note