Security Bulletin: Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.5

Abstract Cross reference list for security vulnerabilities fixed in IBM WebSphere Application Server Fix Pack 8.0.0.5 Content VULNERABILITY DETAILS: CVE ID:CVE-2012-3304 PM54356 DESCRIPTION: WebSphere Application Server could allow a remote attacker to hijack a valid user’s session, caused by an...

CVE-2012-3305

CVE-2012-3305 in IBM WebSphere Application Server is a directory traversal vulnerability present in WAS versions 6.1 (up to 6.1.0.47), 7.0 (up to 7.0.0.25), 8.0 (up to 8.0.0.5), and 8.5 (up to 8.5.0.1). An attacker could remotely overwrite files outside the deployment directory via a crafted appl...