Lucene search
RootSSV:20439HistoryApr 02, 2011 - 12:00 a.m.
IBM WebSphere Application Server未验证访问漏洞
2011-04-0200:00:00
Root
www.seebug.org
22
0.041 Low
EPSS
Percentile
91.2%
CVE ID: CVE-2010-4476
IBM WebSphere Application Server (WAS)是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services (IIS)以及IBM HTTP Server。
运行z/OS的IBM WAS在实现上存在安全漏洞，未授权用户可利用此漏洞访问WebSphere应用程序。
在WebSphere用Local OS用户注册表配置或用RACF适配器配置Federated Repository时会出现此问题。Local OS用户注册表和使用RACF适配器的Federated Repository使用SAF实现，意味着RACF使用和相对产品的使用都受到影响。
IBM Websphere Application Server
厂商补丁：
IBM
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
openvas
openvas
RedHat Update for tomcat5 RHSA-2011:0336-01
2011-03-15 00:00:00
CentOS Update for tomcat5 CESA-2011:0336 centos5 i386
2011-08-09 00:00:00
RedHat Update for tomcat5 RHSA-2011:0336-01
2011-03-15 00:00:00
redhat
redhat
(RHSA-2011:0299) Moderate: java-1.4.2-ibm-sap security update
2011-02-23 00:00:00
(RHSA-2011:0336) Important: tomcat5 security update
2011-03-09 00:00:00
(RHSA-2011:0212) Important: jbossweb security update
2011-02-10 14:41:03
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:53:32
nessus
nessus
Debian DSA-2161-1 : openjdk-6 - denial of service
2011-02-15 00:00:00
RHEL 4 / 5 / 6 : java-1.6.0-ibm (RHSA-2011:0290)
2011-02-23 00:00:00
RHEL 5 / 6 : java-1.6.0-openjdk (RHSA-2011:0214)
2011-02-11 00:00:00
jvn
jvn
JVN#97334690: IBM Lotus vulnerable to denial-of-service (DoS)
2011-03-04 00:00:00
JVN#16308183: IBM DB2 vulnerable to denial-of-service (DoS)
2011-03-04 00:00:00
checkpoint_security
checkpoint_security
prion
prion
Design/Logic Flaw
2011-02-17 19:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2011-02-11 00:00:00
tomcat5 security update
2011-03-09 00:00:00
tomcat6 security and bug fix update
2011-03-09 00:00:00
osv
osv
f5
f5
K12826 : Java Runtime Environment (JRE) vulnerability: CVE-2010-4476
2013-09-11 00:00:00
SOL12826 - Java Runtime Environment (JRE) vulnerability: CVE-2010-4476
2011-05-09 00:00:00
cisa
cisa
Oracle Releases Security Alert for Java Runtime Environment
2011-02-10 00:00:00
ibm
ibm
centos
centos
tomcat5 security update
2011-04-14 14:58:50
java security update
2011-04-14 14:31:40
debian
debian
[SECURITY] [DSA 2161-1] OpenJDK security update
2011-02-13 20:27:08
[SECURITY] [DSA 2161-2] OpenJDK security update
2011-02-14 20:05:54
ubuntucve
ubuntucve
CVE-2010-4476
2011-02-17 00:00:00
cve
cve
CVE-2010-4476
2011-02-17 19:00:00
github
github
securityvulns
securityvulns
HP Network Node Manager i information leakage
2011-10-31 00:00:00
Oracle Java multiple security vulnerabilities / OpenJDK
2011-02-17 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-50.1.8.6.fc13
2011-02-13 08:49:15
[SECURITY] Fedora 14 Update: java-1.6.0-openjdk-1.6.0.0-52.1.9.6.fc14
2011-02-13 08:50:21
[SECURITY] Fedora 14 Update: java-1.6.0-openjdk-1.6.0.0-52.1.9.7.fc14
2011-02-16 19:20:33
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2011-03-17 00:00:00
OpenJDK 6 vulnerabilities
2011-03-15 00:00:00
OpenJDK 6 vulnerabilities
2011-03-01 00:00:00
suse
suse
remote code execution in java-1_4_2-ibm
2011-05-13 13:10:27
Security update for IBM Java 1.4.2 (important)
2011-07-22 05:08:11
remote code execution in java-1_6_0-ibm,java-1_5_0-ibm,java-1_4_2-ibm
2011-03-22 13:32:34
vmware
vmware
oracle
oracle
cpuapr2011
2011-04-19 00:00:00
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2011-11-05 00:00:00
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00