Detections
Analytics
IBM WebSphere Application Server Multiple Vulnerabilities
critical Nessus Plugin ID 83290
Language:
Synopsis
The remote application server is affected by multiple vulnerabilities.Description
The IBM WebSphere Application Server running on the remote host is version 6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 or prior. It is, therefore, affected by multiple vulnerabilities :- An information disclosure vulnerability exists in the SNMP component due to improper handling of configuration data. An authenticated, remote attacker can exploit this disclose sensitive information. (CVE-2015-0174)
- An unspecified flaw exists in the liberty profile due to improper handling of authData elements. An authenticated, remote attacker can exploit this to gain elevated privileges. (CVE-2015-0175)
- An unspecified flaw exists in the liberty profile that is triggered when the run-as user for EJB is not honored under multi-threaded race conditions. An authenticated, remote attacker can exploit this to gain elevated privileges. (CVE-2015-1882)
- A flaw exists that allows a remote attacker to execute arbitrary code by connecting to a management port using a specific sequence of instructions. (CVE-2015-1920)
Solution
Apply Interim Fix PI38302.See Also
https://www-304.ibm.com/support/docview.wss?uid=swg21883573
Plugin Details
Severity: Critical
ID: 83290
File Name: websphere_8_5_5_5.nasl
Version: 1.8
Type: remote
Family: Web Servers
Published: 5/8/2015
Updated: 11/22/2019
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2015-1920
Vulnerability Information
CPE: cpe:/a:ibm:websphere_application_server
Required KB Items: Settings/ParanoidReport, www/WebSphere
Exploit Ease: No known exploits are available
Patch Publication Date: 4/30/2015
Vulnerability Publication Date: 3/18/2015
Reference Information
CVE: CVE-2015-0174, CVE-2015-0175, CVE-2015-1882, CVE-2015-1920