RHEL 6 : Virtualization Manager (RHSA-2015:0888)

Red Hat Enterprise Virtualization Manager 3.5.1 is now available. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links ...

JBoss Application Server RCE Vulnerability

JBoss Application Server is prone to a remote code execution RCE vulnerability. Note: This script is temporary deprecated until check for this vulnerability was implemented. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

IBM WebSphere Application Server (WAS) SNMP Implementation Sensitive Information Disclosure Vulnerability

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WebSphere Application...

IBM WebSphere Application Server (WAS) elevation of privilege vulnerability (CNVD-2015-02799)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An elevation of privilege vulnerability exists in IBM...

IBM WebSphere Application Server (WAS) elevation of privilege vulnerability (CNVD-2015-02800)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An elevation of privilege vulnerability exists in IBM...

IBM WebSphere Application Server (WAS) elevation of privilege vulnerability (CNVD-2015-02806)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An elevation of privilege vulnerability exists in IBM...

CVE-2015-1885

WebSphereOauth20SP.ear in IBM WebSphere Application Server WAS 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vecto...

CVE-2015-1882

Multiple race conditions in IBM WebSphere Application Server WAS 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in Java code execution outside the context of the configured EJB Run-as user...

Code injection

IBM WebSphere Application Server WAS 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors...

Design/Logic Flaw

WebSphereOauth20SP.ear in IBM WebSphere Application Server WAS 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vecto...

CVE-2015-0175

IBM WebSphere Application Server WAS 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2015-0174

The CVE-2015-0174 issue affects IBM WebSphere Application Server (WAS) SNMP handling. The SNMP implementation in WAS 8.5 before 8.5.5.5 fails to properly handle configuration data, allowing remote authenticated users to obtain sensitive information via unspecified vectors. The connected IBM bulle...

CVE-2015-1882

CVE-2015-1882 affects IBM WebSphere Application Server Liberty Profile (8.5.x) prior to 8.5.5.5. It describes multiple race conditions that let remote authenticated users gain elevated privileges by exploiting thread conflicts that execute Java code outside the configured EJB Run-as context. The ...

CVE-2015-1885

CVE-2015-1885 affects IBM WebSphere Application Server: vulnerable when OAuth password grant is used. Affects WebSphere Application Server Full/Profile: 8.5 (Liberty 8.5) up to 8.5.5.x, 8.0 up to 8.0.0.10, and 7.0 up to 7.0.0.38/39. Root cause: OAuth ear (WebSphereOauth20SP.ear) handling allows p...

PT-2015-5484

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS 8.5 Liberty Profile versions prior to 8.5.5.5 Description The issue is related to multiple race conditions that allow remote authenticated users to gain privileges. This is achieved by leveraging thread...

CVE-2015-0174: Exposure of Sensitive Information to an Unauthorized Actor

The SNMP implementation in IBM WebSphere Application Server WAS 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-0175: Undefined Security Weakness

IBM WebSphere Application Server WAS 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2015-1882: Concurrent Execution using Shared Resource with Improper Synchronization

Multiple race conditions in IBM WebSphere Application Server WAS 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in Java code execution outside the context of the configured EJB Run-as user...

CVE-2015-1885: Undefined Security Weakness

WebSphereOauth20SP.ear in IBM WebSphere Application Server WAS 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vecto...

PT-2015-4510

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 8.5.5.5 Description The issue concerns the SNMP implementation, which does not properly handle configuration data. This allows remote authenticated users to obtain sensitive information...