Lucene search

[email protected]CVE-2007-6679

HistoryJan 10, 2008 - 2:46 a.m.

CVE-2007-6679

2008-01-1002:46:00

[email protected]

web.nvd.nist.gov

cve-2007-6679

ibm

websphere

application server

vulnerability

security

monitor role users

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to “security concerns with monitor role users.” NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected.

Affected configurations

NVD

Node

ibmwebsphere_application_serverRange≤6.0.2.24

ibmwebsphere_application_serverMatch6.1

ibmwebsphere_application_serverMatch6.1.0.1

ibmwebsphere_application_serverMatch6.1.0.2

ibmwebsphere_application_serverMatch6.1.0.3

ibmwebsphere_application_serverMatch6.1.0.5

ibmwebsphere_application_serverMatch6.1.0.7

ibmwebsphere_application_serverMatch6.1.0.9

ibmwebsphere_application_serverMatch6.1.0.11

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application serverle6.0.2.24
ibm:websphere_application_serveribm websphere application servereq6.1
ibm:websphere_application_serveribm websphere application servereq6.1.0.1
ibm:websphere_application_serveribm websphere application servereq6.1.0.2
ibm:websphere_application_serveribm websphere application servereq6.1.0.3
ibm:websphere_application_serveribm websphere application servereq6.1.0.5
ibm:websphere_application_serveribm websphere application servereq6.1.0.7
ibm:websphere_application_serveribm websphere application servereq6.1.0.9
ibm:websphere_application_serveribm websphere application servereq6.1.0.11

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	le	6.0.2.24
ibm:websphere_application_server	ibm websphere application server	eq	6.1
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.1
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.2
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.3
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.5
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.7
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.9
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.11

References

secunia.com/advisories/28588

securitytracker.com/id?1019174

www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951

www-1.ibm.com/support/docview.wss?uid=swg27006876

www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only

www.vupen.com/english/advisories/2007/3955

www.vupen.com/english/advisories/2008/0241

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

Related for CVE-2007-6679

prion1 nvd1 cvelist1 nessus2