IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
BID:45989
Info
IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
| Bugtraq ID: | 45989 |
| Class: | Unknown |
| CVE: |
CVE-2011-0679 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 25 2011 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
IBM Websphere Portal Server 6.0.1 .5 IBM Websphere Portal Server 7.0 IBM Websphere Portal Express 6.1.0.0 IBM Websphere Portal Express 6.0.1.3 IBM Websphere Portal Express 6.0.1.1 IBM Lotus Web Content Management 7.0 IBM Lotus Web Content Management 6.1.5 .0 IBM Lotus Web Content Management 6.1 .3 IBM Lotus Web Content Management 6.1 .2 IBM Lotus Web Content Management 6.1 .1 IBM Lotus Web Content Management 6.0.1 .6 IBM Lotus Web Content Management 6.0.1 .5 IBM Lotus Web Content Management 6.0.1 .4 IBM Lotus Web Content Management 60G IBM Lotus Web Content Management 6.0 |
| Not Vulnerable: | |
Discussion
IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
IBM WebSphere Portal and Workplace Web Content Management are prone to an unspecified remote information-disclosure vulnerability.
Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Other attacks with unspecified impact may also be possible. We will update this BID when more information becomes available.
IBM WebSphere Portal and Workplace Web Content Management are prone to an unspecified remote information-disclosure vulnerability.
Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Other attacks with unspecified impact may also be possible. We will update this BID when more information becomes available.
Exploit / POC
IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
IBM WebSphere Portal and Workplace Web Content Management Information Disclosure Vulnerability
References:
References:
- IBM Homepage (IBM)
- Fix Available: WebSphere Portal Security risk, a modified message could be use (IBM)
- PM22167: CUMULATIVE FIX 07 FOR PORTAL 6017 (IBM )
- PM25191: IBM WebSphere Portal and Lotus Web Content Management V7.0.0.0 Combined (IBM)
- PM26397: CUMULATIVE FIX 10 FOR PORTAL 6105 / 6152 (IBM)
- Vulnerability Note VU#375127 IBM WebSphere Portal Server input validation vulner (US-CERT)