Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.

IBM WebSphere Application Server 8.0 before Fix Pack 1 appears to be running on the remote host and is potentially affected by the following vulnerabilities :

  - An open redirect vulnerability exists related to the     'logoutExitPage' parameter. This can allow remote     attackers to trick users into requesting unintended     URLs. (PM35701)

  - The administrative console can display a stack trace     under unspecified circumstances and can disclose     potentially sensitive information to local users.
    (PM36620)

  - An unspecified error exists that can allow cross-site     request forgery attacks. (PM36734)

  - A token verification error exists in the bundled     OpenSAML library. This error can allow an attacker to     bypass security controls with an XML signature wrapping     attack via SOAP messages. (PM43254)

  - A directory traversal attack is possible via unspecified     parameters in the 'help' servlet. (PM45322)

  - The JavaServer Faces (JSF) application functionality     could allow a remote attacker to read files because it     fails to properly handle requests. (PM45992)

  - The HTTP server contains an error in the 'ByteRange'     filter and can allow denial of service attacks when     processing malicious requests. (PM46234)

IBM WebSphere Application Server 7.0 before Fix Pack 19 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - An open redirect vulnerability exists related to the     'logoutExitPage' parameter. This can allow remote     attackers to trick users into requesting unintended     URLs. (PM35701)

  - The administrative console can display a stack trace     under unspecified circumstances and can disclose     potentially sensitive information to local users.
    (PM36620)

  - The Installation Verification Tool servlet (IVT) does     not properly sanitize user-supplied input of arbitrary     HTML and script code, which could allow cross-site     scripting attacks. (PM40733)

  - A token verification error exists in the bundled     OpenSAML library. This error can allow an attacker to     bypass security controls with an XML signature wrapping     attack via SOAP messages. (PM43254)

  - A directory traversal attack is possible via unspecified     parameters in the 'help' servlet. (PM45322)

IBM WebSphere Application Server 6.1 before Fix Pack 39 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - Use of an insecure XML encryption algorithm could allow     for decryption of JAX-RPC or JAX-WS Web Services     requests. (PM34841)

  - An error exists in the validation of the     'logoutExitPage' parameter that can allow a remote     attacker to bypass security restrictions and redirect     users in support of a phishing attack. (PM35701)

  - An error exists in the handling of administration     console requests. This error can allow a local attacker     to use a specially crafted request to view sensitive     stack-trace information. (PM36620)

ID	Name	Product	Family	Severity
56348	IBM WebSphere Application Server 8.0 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Web Servers	high
56229	IBM WebSphere Application Server 7.0 < Fix Pack 19 Multiple Vulnerabilities	Nessus	Web Servers	medium
55649	IBM WebSphere Application Server 6.1 < 6.1.0.39 Multiple Vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2011-1355

medium

Tenable Plugins

high

medium

medium