Test ID:	1.3.6.1.4.1.25623.1.0.802400
Category:	Web Servers
Title:	IBM WebSphere Application Server 6.0.x < 6.0.2.39, 6.1.x < 6.1.0.29, 7.0.x < 7.0.0.7 Information Disclosure Vulnerability
Summary:	IBM WebSphere Application Server is prone to an information; disclosure vulnerability.
Description:	Summary: IBM WebSphere Application Server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to error in the Naming and Directory Interface (JNDI) implementation. It does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call. Vulnerability Impact: Successful exploitation will let remote unauthorized attackers to access or view files or obtain sensitive information. Affected Software/OS: IBM WebSphere Application Server version 6.0.x prior to 6.0.2.39, 6.1.x prior to 6.1.0.29 and 7.0.x prior to 7.0.0.7. Solution: Update to version 6.0.2.39, 6.1.0.29, 7.0.0.7 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2747 AIX APAR: PK91414 http://www.ibm.com/support/docview.wss?uid=swg1PK91414 AIX APAR: PK99480 http://www.ibm.com/support/docview.wss?uid=swg1PK99480 XForce ISS Database: was-userregistry-information-disclosure(54228) https://exchange.xforce.ibmcloud.com/vulnerabilities/54228
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.