IBM WebSphere Application Server Prior to 6.1.0.2 Multiple Vulnerabilities

Bugtraq ID:	20455
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 11 2006 12:00AM
Updated:	Oct 12 2006 06:14PM
Credit:	Reported by the vendor.
Vulnerable:	IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .15 IBM Websphere Application Server 6.0.2 .13 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0
Not Vulnerable:	IBM Websphere Application Server 6.1 .2

IBM WebSphere Application Server Prior to 6.1.0.2 Multiple Vulnerabilities

IBM WebSphere Application Server is prone to multiple unspecified vulnerabilities, including:

- an information-disclosure issue.
- a security exposure with an unknown impact
- an unauthorized-access issue.

IBM WebSphere Application Server versions prior to 6.1.0.2 are vulnerable to these issues.

IBM WebSphere Application Server Prior to 6.1.0.2 Multiple Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Some of these issues likely do not require specific exploit code.

IBM WebSphere Application Server Prior to 6.1.0.2 Multiple Vulnerabilities

Solution:
IBM has released WebSphere Application Server 6.1.0 Fix Pack 2 to address these issues. Please see the references for more information.

IBM WebSphere Application Server Prior to 6.1.0.2 Multiple Vulnerabilities

References:

• 6.1.0.2: WebSphere Application Server V6.1.0 Fix Pack 2 for AIX (IBM)
  
• WebSphere Product Page (IBM)