IBM WebSphere Application Server Multiple Unspecified Vulnerabilities

Bugtraq ID:	32679
Class:	Unknown
CVE:	CVE-2008-5412 CVE-2008-5413 CVE-2008-5414 CVE-2008-5411
Remote:	Yes
Local:	No
Published:	Dec 05 2008 12:00AM
Updated:	Jul 05 2016 10:01PM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 7.0
Not Vulnerable:	IBM Websphere Application Server 7.0.0.1

IBM WebSphere Application Server Multiple Unspecified Vulnerabilities

IBM WebSphere Application Server (WAS) is prone to multiple vulnerabilities.

Attackers can exploit one of the issues to obtain sensitive information.

The impact of the other issues cannot be determined due to lack of technical information at this time. We will update this BID as more information emerges.

These vulnerabilities affect WAS 7.0.

IBM WebSphere Application Server Multiple Unspecified Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server Multiple Unspecified Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

IBM WebSphere Application Server Multiple Unspecified Vulnerabilities

References:

• IBM Websphere Homepage (IBM)
  
• 7.0.0.1: WebSphere Application Server V7.0 Fix Pack 1 for AIX (IBM)
  
• Fix list for IBM WebSphere Application Server version 7.0 (IBM)