CVE-2007-6679
Summary
| CVE | CVE-2007-6679 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-01-10 02:46:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Websphere Application Server | 6.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.11 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.3 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.5 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.7 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.1.0.9 | All | All | All |
| Application | Ibm | Websphere Application Server | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| IBM Fix list for WebSphere Application Server Version 6.0.2 - United States | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| IBM WebSphere Bug in Administrative Console Has Unspecified Impact - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| WebSphere Application Server Two Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM Fix list for IBM WebSphere Application Server V6.1 - United States | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| Webmail- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| IBM Search results | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.