Design/Logic Flaw

2009-02-2222:30:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

JSON

IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) “altered service content” and (2) “digital signature foot-print.”

CPENameOperatorVersion
websphere_partner_gatewayeq6.0.0
websphere_partner_gatewayeq6.0.0.2
websphere_partner_gatewayeq6.0.0.7
websphere_partner_gatewayeq6.0.0.1
websphere_partner_gatewayeq6.0.0.4
websphere_partner_gatewayeq6.0.0.3
websphere_partner_gatewayeq6.0.0.6
websphere_partner_gatewayeq6.0.0.5

Name	Operator	Version
websphere_partner_gateway	eq	6.0.0
websphere_partner_gateway	eq	6.0.0.2
websphere_partner_gateway	eq	6.0.0.7
websphere_partner_gateway	eq	6.0.0.1
websphere_partner_gateway	eq	6.0.0.4
websphere_partner_gateway	eq	6.0.0.3
websphere_partner_gateway	eq	6.0.0.6
websphere_partner_gateway	eq	6.0.0.5