Lucene search

K
ibmIBM28CC49FB103280BB14EF3B3C2643BB48718832E42B21E80C929F84D323F98BEE
HistoryJun 16, 2018 - 9:50 p.m.

Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2016-8919)

2018-06-1621:50:17
www.ibm.com
8

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

Summary

IBM Websphere Application Server is shipped as a component of IBM Security/Tivoli Directory Server. Information about a security vulnerability affecting IBM Websphere Application Server has been published in a security bulletin.

Vulnerability Details

Please see the following security bulletin for vulnerability details:
Potential denial of service with WebSphere Application Server with SOAP connectors (CVE-2016-8919).

Affected Products and Versions

Affected Product and Version(s)

| Product and Version shipped as a component
—|—
IBM Security Directory Server Version 6.4| IBM WebSphere Application Server Version 8.5.5.9
IBM Security Directory Server Version 6.3.1 and
Tivoli Directory Server Version 6.3| IBM WebSphere Application Server Version 7.0.0.41

Remediation/Fixes

Apply WebSphere Application Server Interim Fix PI73519.
After the above we can refer to SDS recommended fixes .

Workarounds and Mitigations

None

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

Related for 28CC49FB103280BB14EF3B3C2643BB48718832E42B21E80C929F84D323F98BEE