Test Kennung:	1.3.6.1.4.1.25623.1.0.802400
Kategorie:	Web Servers
Titel:	IBM WebSphere Application Server 6.0.x < 6.0.2.39, 6.1.x < 6.1.0.29, 7.0.x < 7.0.0.7 Information Disclosure Vulnerability
Zusammenfassung:	IBM WebSphere Application Server is prone to an information; disclosure vulnerability.
Beschreibung:	Summary: IBM WebSphere Application Server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to error in the Naming and Directory Interface (JNDI) implementation. It does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call. Vulnerability Impact: Successful exploitation will let remote unauthorized attackers to access or view files or obtain sensitive information. Affected Software/OS: IBM WebSphere Application Server version 6.0.x prior to 6.0.2.39, 6.1.x prior to 6.1.0.29 and 7.0.x prior to 7.0.0.7. Solution: Update to version 6.0.2.39, 6.1.0.29, 7.0.0.7 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2747 AIX APAR: PK91414 http://www.ibm.com/support/docview.wss?uid=swg1PK91414 AIX APAR: PK99480 http://www.ibm.com/support/docview.wss?uid=swg1PK99480 XForce ISS Database: was-userregistry-information-disclosure(54228) https://exchange.xforce.ibmcloud.com/vulnerabilities/54228
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.