 |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.806833 |
| Categoría: | Web Servers |
| Título: | IBM WebSphere Application Server Multiple Vulnerabilities (swg21595172) |
| Resumen: | IBM WebSphere Application Server is prone to multiple; vulnerabilities. |
| Descripción: | Summary: IBM WebSphere Application Server is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to - The Application Snoop Servlet does not properly restrict access. - insufficient validation of requests by Administration Console. - A security bypass vulnerability when a certain SSLv2 configuration with client authentication is used. Vulnerability Impact: Successful exploitation will allow remote attacker to bypass authentication, to inject arbitrary web script or HTML and to obtain sensitive information. Affected Software/OS: IBM WebSphere Application Server version 7.0 prior to 7.0.0.23. Solution: Update to version 7.0.0.23 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N |
| Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-0716 AIX APAR: PM53132 http://www.ibm.com/support/docview.wss?uid=swg1PM53132 BugTraq ID: 52722 http://www.securityfocus.com/bid/52722 Common Vulnerability Exposure (CVE) ID: CVE-2012-2170 AIX APAR: PM56183 http://www.ibm.com/support/docview.wss?uid=swg1PM56183 XForce ISS Database: was-snoop-info-disclosure(75234) https://exchange.xforce.ibmcloud.com/vulnerabilities/75234 Common Vulnerability Exposure (CVE) ID: CVE-2012-0720 AIX APAR: PM52274 http://www.ibm.com/support/docview.wss?uid=swg1PM52274 XForce ISS Database: was-isc-xss(74044) https://exchange.xforce.ibmcloud.com/vulnerabilities/74044 Common Vulnerability Exposure (CVE) ID: CVE-2012-0717 AIX APAR: PM52351 http://www.ibm.com/support/docview.wss?uid=swg1PM52351 |
| Copyright | Copyright (C) 2016 Greenbone AG |
| Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |