IBM WebSphere Application Server CSRF Vulnerability (swg22001226)

IBM WebSphere Application Server is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

IBM WebSphere Application Server Cross-Site Scripting Vulnerability (CNVD-2017-06809)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM WebSphere...

CVE-2017-1194

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669...

CVE-2017-1194

CVE-2017-1194 corresponds to a cross-site request forgery vulnerability in IBM WebSphere Application Server. The connected IBM security bullets confirm the vulnerability affects WebSphere Application Server across multiple releases (WAS 7.0, 8.0, 8.5, 9.0) and, in some bulletins, WAS Liberty vari...

CVE-2017-1194

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669...

IBM WebSphere Application Server 8.0.0.x < 8.0.0.10 Multiple Vulnerabilities

Binary data 700045.prm...

IBM WebSphere Application Server 7.0.0.x < 7.0.0.35 Multiple Vulnerabilities

Binary data 700044.prm...

IBM WebSphere Application Server 8.5.5.x < 8.5.5.4 Multiple Vulnerabilities

Binary data 700046.prm...

IBM WebSphere Application Server 8.5.5.x < 8.5.5.5 Multiple Vulnerabilities

Binary data 700047.prm...

The vulnerability of WebSphere Application Server for application servers allows attackers to increase their privileges.

The vulnerability of OIDC components and TAI server components of WebSphere Application Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2017-0881

CVE-2017-0881 affects Zulip Server prior to 1.4.3. The issue is in the autosubscribe feature of the check_stream_exists route, allowing an authenticated user to subscribe to a private stream that should require an invitation from an existing member. This could bypass access controls and expose pr...

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

IBM WebSphere Application Server 8.0.0.10 < 8.0.0.14 / 8.5.5.3 < 8.5.5.12 / 9.0.0.0 < 9.0.0.4 OIDC Privilege Escalation

The IBM WebSphere Application Server running on the remote host is version 8.0.0.10 prior to 8.0.0.14, 8.5.5.3 prior to 8.5.5.12, or 9.0.0.0 prior to 9.0.0.4. It is, therefore, affected by a privilege escalation vulnerability in the OpenID Connect OIDC Trust Association Interceptor TAI that is...

IBM WebSphere Application Server Remote Elevation of Privilege Vulnerability (CNVD-2017-03344)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for JavaEE and Web services applications, and is the foundation of the IBM WebSphere software platform. A remote elevation of privilege vulnerability exists in IBM...

IBM WebSphere Application Server 8.5.5 < 8.5.5.12 DoS

Binary data 9989.prm...

IBM WebSphere Application Server Cross-Site Scripting Vulnerability (CNVD-2017-01846)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM WAS. An...

IBM WebSphere Application Server Multiple Vulnerabilities (swg21997743, swg21993797, swg21992315)

IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-1121

IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2017-01515)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An information disclosure vulnerability exists in IBM...

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...