Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM
    Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache
    Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in
    SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet
    servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by
    an entity declaration in a request to the Synapse SimpleStockQuoteService. (CVE-2010-1632)

IBM WebSphere Application Server 7.0 before Fix Pack 13 appears to be running on the remote host.  As such, it is reportedly affected by the following vulnerabilities :

  - A cross-site scripting vulnerability exists in the     administrative console due to improper filtering on     input values. (PM14251)

  - A cross-site scripting vulnerability exists in the     Integrated Solution Console due to improper filtering on     input values. (PM11777)

  - An unspecified cross-site request forgery vulnerability     exists in the administrative console for WebSphere     Application Server. (PM18909)

  - An unspecified cross-site scripting vulnerability     exists in the administrative console for WebSphere     Application Server for z/OS. (PM17046)

  - An error exists in JAX-WS WS-Security, which mishandles     timestamps in the WS-SecurityPolicy specification.
    (PM16014)

  - An error exists in the JAX-WS API, which allows an     attacker to cause a denial of service by sending a     specially crafted JAX-WS request. The server will begin     sending corrupt data to its clients. (PM13777)

  - Apache Axis2/Java, used by WebSphere, is vulnerable to     denial of service and information disclosure attacks due     to an error in its XML DTD handling processes. (PM14844)

  - An unspecified error exists in the administration     console that can cause high CPU usage and denial of     service when specially crafted URLs are requested.
    (PM11807)

ID	Name	Product	Family	Severity
408645	SCA: security update for org.apache.axis2.wso2:axis2 (GHSA-23vv-v25h-qwqw)	Tenable Cloud Security	SCA Checks	critical
408645	SCA: security update for org.apache.axis2.wso2:axis2 (GHSA-23vv-v25h-qwqw)	Tenable Self-Hosted Container Security	SCA Checks	critical
50561	IBM WebSphere Application Server 7.0 < Fix Pack 13 Multiple Vulnerabilities	Nessus	Web Servers	high

Detections

Analytics

CVE-2010-1632

critical

Tenable Plugins

critical

critical

high