Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted URL.

IBM WebSphere Application Server 7.0 before Fix Pack 13 appears to be running on the remote host.  As such, it is reportedly affected by the following vulnerabilities :

  - A cross-site scripting vulnerability exists in the     administrative console due to improper filtering on     input values. (PM14251)

  - A cross-site scripting vulnerability exists in the     Integrated Solution Console due to improper filtering on     input values. (PM11777)

  - An unspecified cross-site request forgery vulnerability     exists in the administrative console for WebSphere     Application Server. (PM18909)

  - An unspecified cross-site scripting vulnerability     exists in the administrative console for WebSphere     Application Server for z/OS. (PM17046)

  - An error exists in JAX-WS WS-Security, which mishandles     timestamps in the WS-SecurityPolicy specification.
    (PM16014)

  - An error exists in the JAX-WS API, which allows an     attacker to cause a denial of service by sending a     specially crafted JAX-WS request. The server will begin     sending corrupt data to its clients. (PM13777)

  - Apache Axis2/Java, used by WebSphere, is vulnerable to     denial of service and information disclosure attacks due     to an error in its XML DTD handling processes. (PM14844)

  - An unspecified error exists in the administration     console that can cause high CPU usage and denial of     service when specially crafted URLs are requested.
    (PM11807)

IBM WebSphere Application Server 6.1 before Fix Pack 33 appears to be running on the remote host.  As such, it is reportedly affected by multiple vulnerabilities :

  - An unspecified cross-site scripting vulnerability     exists in the Administration Console. (PM09250,     PM11778)

  - An unspecified error exists when a Java API for XML Web     Services (JAX-WS) application with the WS-Security policy     specifies a Time Stamp value. (PM16014 / PM08360)

  - Sensitive information is stored by     'ceiDbPasswordDefaulter' in the     '<WAS_HOME>/logs/managedprofiles/*_create.log file.
    (PM12065)

  - When security tracing is enabled, it is possible for a     NullPointerException to be thrown when calling a     logout on a LoginContext. (PM02636)

ID	Name	Product	Family	Type	Severity
50561	IBM WebSphere Application Server 7.0 < Fix Pack 13 Multiple Vulnerabilities	Nessus	Web Servers	Remote	high
49691	IBM WebSphere Application Server 6.1 < 6.1.0.33 Multiple Vulnerabilities	Nessus	Web Servers	Remote	critical

Detections

Analytics

CVE-2010-0781

medium

Tenable Plugins

high

critical