Lucene search

K
jvnJapan Vulnerability NotesJVN:26301278
HistoryMar 04, 2011 - 12:00 a.m.

JVN#26301278: IBM WebSphere Application Server vulnerable to denial-of-service (DoS)

2011-03-0400:00:00
Japan Vulnerability Notes
jvn.jp
20

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.2%

IBM WebSphere Application Server contains a denial-of-service (DoS) vulnerability due to an issue in Java Runtime Environment (JRE).

Impact

A remote attacker may cause a denial-of-service (DoS).

Solution

Apply a patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

  • IBM WebSphere Application Server from V6.0 to V6.0.2.43
  • IBM WebSphere Application Server from V6.1 to V6.1.0.35
  • IBM WebSphere Application Server from V7.0 to V7.0.0.13
    According to the developer:
    _
    " For other IBM software products that contain an affected version of WAS, require an update. Specifically, WebSphere Process Server (WPS), WebSphere Enterprise Service Bus (WESB), WebSphere Virtual Enterprise (WVE), WebSphere Commerce and others are applicable. Also, IBM HTTP Server is not affected by this vulnerability."_

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.2%