The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.

IBM WebSphere Application Server 7.0 before Fix Pack 15 appears to be running on the remote host.  As such, it is reportedly affected by the following vulnerabilities :

  - A double free error in BBOOORBR control block could     trigger a denial of service condition. (PM17170)

  - A cross-site scripting vulnerability exists in the     web container. (PM18512)

  - It is possible for authenticated users to trigger a DoS     condition by using Lightweight Third-Party     Authentication (LTPA) tokens for authentication.
    (PM18644)

  - Sensitive wsadmin command parameters are included in     trace files, which could result in an information     disclosure vulnerability. (PM18736)

  - A memory leak in    'com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl' could     trigger a DoS condition. (PM19500)

  - It is possible to trigger a DoS condition via SAAJ     API provided by the WebSphere Web services runtime.
    (PM19534)

  - The Service Integration Bus (SIB) messaging engine is     affected by a DoS issue. (PM19834)

  - The installer creates a temporary log file directory     with open '777' permissions. (PM20021)

  - A cross-site scripting vulnerability exists in the     IVT application.(PM20393)

  - User credentials are not cleared from the cache, even     after an user has logged out. (PM21536)

  - Trace requests are not handled correctly, which could     result in an unspecified issue. (PM22860)

  - A memory leak in     'org.apache.jasper.runtime.JspWriterImpl.response' could     trigger a denial of service condition. (PM23029)

  - Under certain conditions, SIP proxy may stop processing     UDP messages, resulting in a DoS condition. (PM23115)

  - Memory leak in the messaging engine could trigger a     denial of service condition. (PM23626)

  - Improper access is allowed to certain control servlets.
    (PM24372)

  - The AuthCache purge implementation is not able to     purge a user in AuthCache. (PM24668)

  - Incorrect security role mapping could occur while     using J2EE 1.4 application. (PM25455)

  - It is possible for Administrator role members to modify     primary administrative id via the administrative     console. (PK88606)

IBM WebSphere Application Server 6.1 before Fix Pack 35 appears to be running on the remote host.  As such, it is reportedly affected by multiple vulnerabilities :

  - An unspecified cross-site scripting vulnerability     exists in the Administration Console. (PM14251)

  - A double free error in BBOOORBR control block could     trigger a denial of service condition. (PM17170)

  - An unspecified cross-site scripting vulnerability     exists in the web container. (PM18512)

  - It is possible for authenticated users to trigger a DoS     condition by using Lightweight Third-Party     Authentication (LTPA) tokens for authentication.
    (PM18644)

  - Sensitive wsadmin command parameters are included in     trace files, which could result in an information     disclosure vulnerability. (PM18736)

  - An unspecified cross-site request forgery vulnerability     exists in the Administration Console. (PM18909)

  - User credentials are not cleared from the cache, even     after a user has logged out. (PM21536)

  - An unspecified vulnerability could allow improper     access to console servlets. (PM24372)

ID	Name	Product	Family	Type	Severity
52615	IBM WebSphere Application Server 7.0 < Fix Pack 15 Multiple Vulnerabilities	Nessus	Web Servers	Remote	high
51510	IBM WebSphere Application Server 6.1 < 6.1.0.35 Multiple Vulnerabilities	Nessus	Web Servers	Remote	medium

Detections

Analytics

CVE-2011-0316

high

Tenable Plugins

high

medium