Lucene search

K
ibmIBM69C8967F4E0ADFDC7D28F1A0996D9F0E59D0C935DF60D0A6EC76EE6A72A513E7
HistoryJan 27, 2020 - 10:16 p.m.

Security Bulletin: A Security Vulnerability Has Been Identified In WebSphere Application Server Admin Console shipped with IBM Tivoli Access Manager for e-business (CVE-2019-4271)

2020-01-2722:16:29
www.ibm.com
4

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

Summary

WebSphere Application Server Admin Console is shipped with IBM Tivoli Access Manager for e-business Information about security vulnerabilities affecting WebSphere Application Server Admin Console have been published in a security bulletin

Vulnerability Details

Refer to the security bulletins(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
IBM Tivoli Access Manager for e-business 6.1.1.x
IBM Tivoli Access Manager for e-business 6.1.x

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by WebSphere Application Server Admin Console which is/are shipped with IBM Tivoli Access Manager for e-business

Security Bulletin: HTTP Parameter Pollution and XSS vulnerability in WebSphere Application Server Admin Console ND (CVE-2019-4271)

Workarounds and Mitigations

None

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

Related for 69C8967F4E0ADFDC7D28F1A0996D9F0E59D0C935DF60D0A6EC76EE6A72A513E7