PT-2011-2554 · Ibm · Ibm Lotus Quickr+2

Peter Brauchle · Published 2011-01-28 · Updated 2017-08-17 · CVE-2011-0679

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.0.1.1 through 7.0.0.0

Description The issue allows remote attackers to obtain sensitive information via a modified message. This could potentially impact systems that rely on IBM WebSphere Portal, such as those using IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal.

Recommendations For IBM WebSphere Portal versions 6.0.1.1 through 7.0.0.0, update to a version outside of the affected range to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-0679

Affected Products

Ibm Lotus Quickr

Lotus Web Content Management

Ibm Websphere Portal

References · 16

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM24319 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM22159 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0679 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM24320 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM22167 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM25191 · Vendor Advisory
• http://secunia.com/advisories/43081 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM25698 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM26397 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0223 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64890 · Note
• http://ibm.com/support/docview.wss?uid=swg21460422 · Note
• http://osvdb.org/70688 · Note
• http://kb.cert.org/vuls/id/375127 · Note
• http://securityfocus.com/bid/45989 · Note