The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service (daemon outage) via a crafted request.

IBM WebSphere Application Server 8.0 before Fix Pack 5 appears to be running on the remote host.  It is, therefore, potentially affected by the following vulnerabilities :

  - An unspecified error exists related to the     Administrative Console that can allow an attacker to     hijack sessions. (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to Federated Repositories for     IIOP connections, Optimized Local Adapters and CBIND     checking that can allow a local attacker to access or     modify arbitrary files. Note this issue only affects the     application when hosted on z/OS. (CVE-2012-3311,     PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

  - A request validation error exists related to the proxy     server component that could allow a remote attacker to     cause the proxy status to be reported as disabled, thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

IBM WebSphere Application Server 7.0 before Fix Pack 27 appears to be running on the remote host.  It is, therefore, potentially affected by the following vulnerabilities :

  - A request validation error exists related to the proxy     server component that could allow a remote attacker to     cause the proxy status to be reported as disabled, thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

  - A user-supplied input validation error exists that could     allow cross-site request forgery (CSRF) attacks to be     carried out. (CVE-2012-4853, PM62920)

  - Unspecified errors exist related to the administration     console that could allow cross-site scripting attacks.
    (CVE-2013-0458, CVE-2013-0459, CVE-2013-0460, PM71139,     PM72536, PM72275)

  - An unspecified error exists related to the     administration console for 'virtual member manager'     (VMM) that can allow cross-site scripting.
    (CVE-2013-0461, PM71389)

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, PM66410)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)  
  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296) 

  - A request validation error exists related to the proxy     server component that can allow a remote attacker to     cause the proxy status to be reported as disabled thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

  - A request validation error exists related to the     'Liberty Profile' and 'JAX-RS' that can allow a remote     attacker to elevate privileges. (CVE-2012-4850, PM67082)

  - A user-supplied input validation error exists related     to the 'Liberty Profile' that can allow cross-site     scripting attacks to be carried out. (CVE-2012-4851,     PM68643)

  - A user-supplied input validation error exists that can     allow cross-site request forgery (CSRF) attacks to be     carried out. (CVE-2012-4853, PM62920)

ID	Name	Product	Family	Severity
64380	IBM WebSphere Application Server 8.0 < Fix Pack 5 Multiple Vulnerabilities	Nessus	Web Servers	medium
64097	IBM WebSphere Application Server 7.0 < Fix Pack 27 Multiple Vulnerabilities	Nessus	Web Servers	medium
62975	IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Web Servers	high

Detections

Analytics

CVE-2012-3330

high

Tenable Plugins

medium

medium

high