vulnerability note CVE-2012-0193 CVE-2012-0717 CVE-2012-2161
WebSphere AS 8.0: five vulnerabilities
Synthesis of the vulnerability
An attacker can use several vulnerabilities of WebSphere Application Server.Impacted products:
BID-52724, BID-53755, BID-54051, BID-54819, BID-55149, BID-55185, CVE-2012-0193, CVE-2012-0717, CVE-2012-2161, CVE-2012-2170, CVE-2012-2190, CVE-2012-2191, CVE-2012-3293, PM52351, PM53930, PM56183, PM60839, PM62795, PM66218, swg21587015, swg21606096, swg27022958, VIGILANCE-VUL-11824.
Description of the vulnerability
Five vulnerabilities were announced in WebSphere Application Server.
An attacker can obtain information via Application Snoop Servlet. [severity:1/4; BID-53755, CVE-2012-2170, PM56183]
An attacker can use a Cross Frame Scripting on the administrative console. [severity:2/4; BID-54819, BID-55149, CVE-2012-3293, PM60839]
An attacker can send data generating storage collisions, in order to overload a service (VIGILANCE-VUL-11254). [severity:2/4; CVE-2012-0193, PM53930]
An attacker can bypass the authentication using a SSL client certificate. [severity:2/4; BID-52724, CVE-2012-0717, PM52351, swg21587015]
An attacker can send malicious SSL packets, in order to create a denial of service (VIGILANCE-VUL-12037 and VIGILANCE-VUL-12038). [severity:2/4; BID-55185, CVE-2012-2190, CVE-2012-2191, PM66218]
Share this bulletin
Computer vulnerabilities tracking service
Vigil@nce provides a computer vulnerability announce
. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The technology watch team tracks security threats targeting the computer system.