IBM WebSphere Application Server 7.0 < Fix Pack 3 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 4991


The remote host is vulnerable to multiple attack vectors.


IBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities.

- Under certain conditions it may be possible to access administrative console user sessions. (PK74966)

- The adminitrative console is affected by a cross-site scripting vulnerability. (PK77505)

- If APAR PK41002 has been applied, an unspecified vulnerability in JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'. (PK75992)

- Sample applications shipped with IBM WebSphere Application Server are affected by cross-site scripting vulnerabilities. (PK76720)

- Certain files associated with interim fixes for Unix-based versions of IBM WebSphere Application Server are built with insecure file permissions. (PK77590)

- The Web Services Security component is affected by an unspecified security issue in digital-signature specification. (PK80596)

- It may be possible for an attacker to read arbitrary application-specific war files. (PK81387)

- The application is prone to a session-highjacking vulnerability related to the 'forced logout' feature. (PK74966)

- A vulnerability affects the XML Digital Signature Specification in the web services security component. (PK80596)


Apply Fix Pack 3 ( or higher.

See Also

Plugin Details

Severity: High

ID: 4991

File Name: 4991.prm

Family: Web Servers

Published: 2009/04/15

Modified: 2016/01/15

Dependencies: 4270

Nessus ID: 36133

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C


Base Score: 7.3

Temporal Score: 6.8


Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:websphere_application_server

Reference Information

CVE: CVE-2009-0508, CVE-2009-0892, CVE-2009-1172, CVE-2009-1173, CVE-2009-1174, CVE-2009-0903

BID: 34330, 34358, 34104, 34501, 34502, 34506, 35594, 35610