BID:28216

IBM WebSphere Prior to 6.1.0.15 Multiple Vulnerabilities

Info

IBM WebSphere Prior to 6.1.0.15 Multiple Vulnerabilities

Bugtraq ID:	28216
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 10 2008 12:00AM
Updated:	Mar 13 2008 04:11PM
Credit:	The vendor disclosed these issues.
Vulnerable:	IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1

Not Vulnerable:	IBM Websphere Application Server 6.1 .15

Discussion

IBM WebSphere Prior to 6.1.0.15 Multiple Vulnerabilities

IBM WebSphere Application Server is prone to multiple vulnerabilities, including information-disclosure issues and several vulnerabilities with unknown impact.

Very little information is known about these issues. We will update this BID as more information emerges.

Versions prior to IBM WebSphere Application Server 6.1.0.15 are vulnerable.

Exploit / POC

IBM WebSphere Prior to 6.1.0.15 Multiple Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may not require specific exploit code.

Solution / Fix

IBM WebSphere Prior to 6.1.0.15 Multiple Vulnerabilities

Solution:
IBM has released an update (6.1.0.15) to address these issues. Please see the references for more information.

IBM Websphere Application Server 6.1 .13