IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF20 Multiple Vulnerabilities

high Nessus Plugin ID 93076

Language:

Synopsis

The web portal software installed on the remote Windows host is affected by multiple vulnerabilities.

Description

The version of IBM WebSphere Portal installed on the remote host is 8.0.0.x prior to 8.0.0.1 CF20. It is, therefore, affected by multiple vulnerabilities :

- An open redirect vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted link, to redirect a user from the intended legitimate web site to an arbitrary web site of the attacker's choosing. (CVE-2015-7428)
- An XML external entity (XXE) injection vulnerability exists due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. An authenticated, remote attacker can exploit this, via specially crafted XML data, to cause a denial of service or disclose sensitive information.
(CVE-2016-0245)

Solution

Upgrade to IBM WebSphere Portal version 8.0.0.1 CF20 or later.

Plugin Details

Severity: High

ID: 93076

File Name: websphere_portal_8_0_0_1_cf20.nasl

Version: 1.5

Type: local

Family: CGI abuses

Published: 8/23/2016

Updated: 11/14/2019

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2015-7428

CVSS v3

Risk Factor: High

Base Score: 7.4

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:websphere_portal

Required KB Items: installed_sw/IBM WebSphere Portal

Exploit Ease: No exploit is required

Patch Publication Date: 2/23/2016

Vulnerability Publication Date: 2/23/2016

Reference Information

CVE: CVE-2015-7428, CVE-2016-0245

BID: 83479, 83485

Detections

Analytics