1032190

PI21072

http://www-01.ibm.com/support/docview.wss?uid=swg21697368

The remote host appears to be running IBM WebSphere Application Server 8.5.5.x prior to 8.5.5.5.  Such versions are potentially affected by multiple issues :

 - A flaw exists in the SNMP capability that is triggered when handling configuration data that may allow an authenticated remote attacker to gain access to potentially sensitive information. (CVE-2015-0174)
 - An unspecified flaw exists in the liberty profile that is triggered when handling authData elements. This may allow an auhenticated remote attacker to gain elevated privileges. (CVE-2015-0175)
 - A flaw exists in the liberty profile that is triggered as the run-as user for EJB is not honored under multi-threaded race conditions. This may allow an authenticated remote attacker to gain elevated privileges. (CVE-2015-1882)

The IBM WebSphere Application Server running on the remote host is version 6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 or prior. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists in the     SNMP component due to improper handling of configuration     data. An authenticated, remote attacker can exploit this     disclose sensitive information. (CVE-2015-0174)

  - An unspecified flaw exists in the liberty profile due to     improper handling of authData elements. An     authenticated, remote attacker can exploit this to gain     elevated privileges. (CVE-2015-0175)

  - An unspecified flaw exists in the liberty profile that     is triggered when the run-as user for EJB is not honored     under multi-threaded race conditions. An authenticated,     remote attacker can exploit this to gain elevated     privileges. (CVE-2015-1882)

  - A flaw exists that allows a remote attacker to execute     arbitrary code by connecting to a management port using     a specific sequence of instructions. (CVE-2015-1920)

ID	Name	Product	Family	Severity
700047	IBM WebSphere Application Server 8.5.5.x < 8.5.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
83290	IBM WebSphere Application Server Multiple Vulnerabilities	Nessus	Web Servers	critical

CVE-2015-0174

medium

Tenable Plugins

high

critical