IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - Use of an insecure XML encryption algorithm could allow     for decryption of JAX-RPC or JAX-WS Web Services     requests. (PM34841)

  - A remote attacker can gain unspecified application access     on z/OS, when a Local OS user registry or Federated     Repository with RACF adapter is used. (PM35480)

Note that the fix for PM34841 is not enabled by default in order to maintain application compatibility with respect to SOAPFaults.  To enable it, it is necessary to set the 'webservices.unify.faults=true' JVM custom property once the update has been installed.

IBM WebSphere Application Server 6.1 before Fix Pack 37 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - It is possible to trigger a DoS condition via SAAJ     API provided by the WebSphere Web services runtime.
    (PM19534)

  - An unspecified cross-site scripting vulnerability     exists in the IVT application. (PM20393)

  - The AuthCache purge implementation is not able to     purge a user in AuthCache. (PM24668)

  - A remote attacker can gain unspecified application access     on z/OS, when a Local OS user registry or Federated     Repository with RACF adapter is used. (PM35478)

ID	Name	Product	Family	Type	Severity
55169	IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities	Nessus	Web Servers	Remote	medium
53475	IBM WebSphere Application Server 6.1 < 6.1.0.37 Multiple Vulnerabilities	Nessus	Web Servers	Remote	medium

Detections

Analytics

CVE-2011-1683

high

Tenable Plugins

medium

medium