CVE-2011-0679

Description

IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64890

http://www.vupen.com/english/advisories/2011/0223

http://www.securityfocus.com/bid/45989

http://www.kb.cert.org/vuls/id/375127

http://www.ibm.com/support/docview.wss?uid=swg21460422

http://www-01.ibm.com/support/docview.wss?uid=swg1PM26397

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25698

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25191

http://www-01.ibm.com/support/docview.wss?uid=swg1PM24320

http://www-01.ibm.com/support/docview.wss?uid=swg1PM24319

http://www-01.ibm.com/support/docview.wss?uid=swg1PM22167

http://www-01.ibm.com/support/docview.wss?uid=swg1PM22159

http://secunia.com/advisories/43081

http://osvdb.org/70688

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS