IBM WebSphere Application Server Multiple Remote Vulnerabilities

Bugtraq ID:	18672
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 27 2006 12:00AM
Updated:	Jun 27 2007 09:28PM
Credit:	Reported by the vendor.
Vulnerable:	IBM Websphere Application Server 5.1.1 .9 IBM Websphere Application Server 5.1.1 .8 IBM Websphere Application Server 5.1.1 .7 IBM Websphere Application Server 5.1.1 .6 IBM Websphere Application Server 5.1.1 .5 IBM Websphere Application Server 5.1.1 .4 IBM Websphere Application Server 5.1.1 .3 IBM Websphere Application Server 5.1.1 .2 IBM Websphere Application Server 5.1.1 .10 IBM Websphere Application Server 5.1.1 .1 IBM Websphere Application Server 5.1.1
Not Vulnerable:	IBM Websphere Application Server 5.1.1 .11

IBM WebSphere Application Server Multiple Remote Vulnerabilities

IBM WebSphere Application Server is prone to multiple remote vulnerabilities. These include an unspecified vulnerability affecting the Core Console Plugin Module of the administrative console and an information-disclosure issue affecting the Web Container Implementation.

IBM WebSphere Application Server versions prior to 5.1.1 Cumulative Fix 11 for Windows are vulnerable.

IBM WebSphere Application Server Multiple Remote Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

IBM WebSphere Application Server Multiple Remote Vulnerabilities

Solution:
IBM has released WebSphere Application Server 5.1.1 Cumulative Fix 11 for Windows. Please see the references for more information.

IBM WebSphere Application Server Multiple Remote Vulnerabilities

References:

• 5.1.1.11: WebSphere Application Server V5.1.1 Cumulative Fix 11 for Windows (IBM)
  
• Fix list for WebSphere Application Server Version 5.1.1 (IBM)