Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM582026D1EE4D8CBE22FA8992D4423D4852BCC9DE837E6C643B80148C8AAC1349
HistoryAug 03, 2021 - 3:09 p.m.

Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with IBM Tivoli Access Manager for e-business

2021-08-0315:09:12
www.ibm.com
9

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.2%

JSON

Summary

WebSphere Application Server is shipped with IBM Tivoli Access Manager for e-business. Information about security vulnerabilities affecting WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

IBM Tivoli Access Manager for e-business 6.1.x
IBM Tivoli Access Manager for e-business 6.1.1.x

Remediation/Fixes

Principal Product and Versions Affected Supporting Product and Versions Affected Supporting Product Security Bulletins
IBM Tivoli Access Manager for e-business 6.1.x WebSphere Application Server 7.0, 8.0, 8.5, 9.0.

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server

Security Bulletin: WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability (CVE-2021-29754)

Security Bulletin: WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability (CVE-2021-29736)

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security access managereq6.1.

Related

ibm 54
prion 2
cve 2
cnvd 1
nessus 1
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring installed WebSphere Application Server
2022-12-30 17:31:59
Security Bulletin: Security vulnerabilitiy has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager
2021-08-18 23:52:54
Security Bulletin: WebSphere Application Server, which is bundled in IBM Cloud Pak for Applications, is vulnerable to a Privilege Escalation vulnerability (CVE-2021-29736)
2021-08-24 14:12:47
prion
prion
Privilege escalation
2021-06-11 15:15:00
Code injection
2021-07-30 12:15:00
cve
cve
CVE-2021-29754
2021-06-11 15:15:00
CVE-2021-29736
2021-07-30 12:15:00
cnvd
cnvd
IBM WebSphere Application Server Elevation of Privilege Vulnerability (CNVD-2021-71530)
2021-08-02 00:00:00
nessus
nessus
IBM WebSphere Application Server 7.0.x <= 7.0.0.45 / 8.0.x <= 8.0.0.14 / 8.5.x < 8.5.5.21 / 9.0.x < 9.0.5.9 Privilege Escalation
2021-08-03 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.2%

JSON
Related for 582026D1EE4D8CBE22FA8992D4423D4852BCC9DE837E6C643B80148C8AAC1349
ibm54prion2cve2cnvd1nessus1