IBM WebSphere Application Server Multiple Security Vulnerabilities
BID:35405
Info
IBM WebSphere Application Server Multiple Security Vulnerabilities
| Bugtraq ID: | 35405 |
| Class: | Unknown |
| CVE: |
CVE-2009-1901 CVE-2009-1900 CVE-2009-1899 CVE-2009-1898 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 01 2009 12:00AM |
| Updated: | Jun 17 2009 01:59PM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .33 IBM Websphere Application Server 6.0.2 .31 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .29 IBM Websphere Application Server 6.0.2 .25 IBM Websphere Application Server 6.0.2 .24 IBM Websphere Application Server 6.0.2 .23 IBM Websphere Application Server 6.0.2 .22 IBM Websphere Application Server 6.0.2 .21 IBM Websphere Application Server 6.0.2 .19 IBM Websphere Application Server 6.0.2 .17 IBM Websphere Application Server 6.0.2 .15 IBM Websphere Application Server 6.0.2 .13 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0.2.19 IBM Websphere Application Server 6.0.2 Fix Pack 17 |
| Not Vulnerable: |
IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 6.0.2 .35 |
Discussion
IBM WebSphere Application Server Multiple Security Vulnerabilities
IBM WebSphere Application Server (WAS) is prone to multiple security vulnerabilities, including security-bypass, information-disclosure, and other unspecified issues.
Attackers can leverage these issues to bypass security measures or obtain sensitive information that can aid in further attacks.
Versions in the 6.0.2.x branch prior to WAS 6.0.2.35 are vulnerable.
IBM WebSphere Application Server (WAS) is prone to multiple security vulnerabilities, including security-bypass, information-disclosure, and other unspecified issues.
Attackers can leverage these issues to bypass security measures or obtain sensitive information that can aid in further attacks.
Versions in the 6.0.2.x branch prior to WAS 6.0.2.35 are vulnerable.
Exploit / POC
IBM WebSphere Application Server Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM WebSphere Application Server Multiple Security Vulnerabilities
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
IBM WebSphere Application Server Multiple Security Vulnerabilities
References:
References: