IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF19 PI51395 and PI53426 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is 8.0.0.x prior to 8.0.0.1 CF19 with interim fixes PI51395 and PI53426. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Portal AccessControl REST API that allows an...

IBM WebSphere Portal AccessControl REST API Information Disclosure (PI51395)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by an information disclosure vulnerability due to improper access control enforcement of the REST API. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to gain access to...

CVE-2015-7447

IBM WebSphere Portal information disclosure vulnerability (CVE-2015-7447) affects multiple versions: 6.1.0–6.1.0.6 CF27, 6.1.5–6.1.5.3 CF27, 7.0.0–7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09. The flaw allows remote, unauthenticated attackers to bypass Portal AccessControl REST ...