IBM WebSphere Application Server XML Digital Signature Unspecified Security Vulnerability

Bugtraq ID:	34506
Class:	Unknown
CVE:	CVE-2009-1174
Remote:	Yes
Local:	No
Published:	Mar 27 2009 12:00AM
Updated:	Jun 17 2009 02:09PM
Credit:	The vendor
Vulnerable:	IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0
Not Vulnerable:	IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 6.1 .25

IBM WebSphere Application Server XML Digital Signature Unspecified Security Vulnerability

IBM WebSphere Application Server is prone to an unspecified security vulnerability. This issue affects the XML Digital Signature Specification in the Web Services Security component.

Very little is known about this issue or its effects at this time. We will update this BID as more information emerges.

Versions prior to WebSphere Application Server 7.0.0.3 are vulnerable.

IBM WebSphere Application Server XML Digital Signature Unspecified Security Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server XML Digital Signature Unspecified Security Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

IBM WebSphere Application Server XML Digital Signature Unspecified Security Vulnerability

References:

• Fix list for IBM WebSphere Application Server version 7.0 (IBM)
  
• IBM WebSphere Application Server Product Page (IBM)
  
• swg27007951 Fix list for IBM WebSphere Application Server version 6.1 (IBM)