PRIOn knowledge basePRION:CVE-2012-3306

HistorySep 25, 2012 - 8:55 p.m.

Authentication flaw

2012-09-2520:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.0%

JSON

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.

CPENameOperatorVersion
websphere_application_servereq6.1.0.21
websphere_application_servereq6.1.0.31
websphere_application_servereq7.0.0.14
websphere_application_servereq7.0.0.2
websphere_application_servereq6.1.0.19
websphere_application_servereq7.0.0.5
websphere_application_servereq7.0.0.15
websphere_application_servereq6.1.0.2
websphere_application_servereq7.0.0.23
websphere_application_servereq7.0.0.9

Name	Operator	Version
websphere_application_server	eq	6.1.0.21
websphere_application_server	eq	6.1.0.31
websphere_application_server	eq	7.0.0.14
websphere_application_server	eq	7.0.0.2
websphere_application_server	eq	6.1.0.19
websphere_application_server	eq	7.0.0.5
websphere_application_server	eq	7.0.0.15
websphere_application_server	eq	6.1.0.2
websphere_application_server	eq	7.0.0.23
websphere_application_server	eq	7.0.0.9

Rows per page:

1-10 of 511

References

www-01.ibm.com/support/docview.wss?uid=swg1PM66514

www.ibm.com/support/docview.wss?uid=swg21611313

exchange.xforce.ibmcloud.com/vulnerabilities/77478

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.0%

JSON

Related for PRION:CVE-2012-3306