Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public
    methods via a crafted request that bypasses the include/exclude checks. (CVE-2007-0184)

Websphere has been updated to version 2.1.0.1 to fix several security vulnerabilities in the included subprojects, such as Apache Geronimo and Tomcat. (CVE-2007-0184 / CVE-2007-0185 / CVE-2007-2377 / CVE-2007-2449 / CVE-2007-2450 / CVE-2007-3382 / CVE-2007-3385 / CVE-2007-3386 / CVE-2007-5333 / CVE-2007-5342 / CVE-2007-5461 / CVE-2007-5613 / CVE-2007-5615 / CVE-2007-6286 / CVE-2008-0002 / CVE-2008-1232 / CVE-2008-1947 / CVE-2008-2370 / CVE-2008-2938)

ID	Name	Product	Family	Severity
409385	SCA: security update for org.directwebremoting:dwr (GHSA-384c-gg34-g96h)	Tenable Cloud Security	SCA Checks	high
409385	SCA: security update for org.directwebremoting:dwr (GHSA-384c-gg34-g96h)	Tenable Self-Hosted Container Security	SCA Checks	high
41596	SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 5850)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2007-0184

high

Tenable Plugins

high

high

high