| The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them. |
|
 |
|
|
Computer vulnerabilities of WebSphere Application Server Traditional
WebSphere AS: information disclosure via HttpSessionIdReuse
Synthesis of the vulnerability
An attacker can bypass access restrictions to data via HttpSessionIdReuse of WebSphere AS, in order to obtain sensitive information.
Impacted products: WebSphere AS Traditional, IBM WebSphere ESB.
Severity: 2/4.
Consequences: data reading.
Provenance: intranet client.
Creation date: 17/08/2016.
Identifiers: 1982588, 1989628, 7014463, CVE-2016-0385, VIGILANCE-VUL-20407.
Description of the vulnerability
An attacker can bypass access restrictions to data via HttpSessionIdReuse of WebSphere AS, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
WebSphere AS: Cross Site Request Forgery
Synthesis of the vulnerability
An attacker can trigger a Cross Site Request Forgery of WebSphere AS, in order to force the victim to perform operations.
Impacted products: Tivoli System Automation, Tivoli Workload Scheduler, WebSphere AS Traditional, IBM WebSphere ESB.
Severity: 2/4.
Consequences: user access/rights.
Provenance: internet client.
Creation date: 17/08/2016.
Identifiers: 1980645, 1989353, 1989628, 1995384, 7014463, CVE-2016-0377, VIGILANCE-VUL-20406.
Description of the vulnerability
The WebSphere AS product offers a web service.
However, the origin of queries is not checked. They can for example originate from an image included in an HTML document.
An attacker can therefore trigger a Cross Site Request Forgery of WebSphere AS, in order to force the victim to perform operations.
Full Vigil@nce bulletin... (Free trial) |
WebSphere AS: denial of service via SIP
Synthesis of the vulnerability
An attacker can send a malicious SIP packet to IBM WebSphere AS, in order to trigger a denial of service.
Impacted products: Tivoli System Automation, WebSphere AS Traditional, IBM WebSphere ESB.
Severity: 2/4.
Consequences: denial of service on server, denial of service on service.
Provenance: intranet client.
Creation date: 02/08/2016.
Identifiers: 1984796, 1989351, 1989628, 7014463, CVE-2016-2960, VIGILANCE-VUL-20285.
Description of the vulnerability
The IBM WebSphere AS product has a service to manage received SIP packets.
However, when a malicious packet is received, a fatal error occurs.
An attacker can therefore send a malicious SIP packet to IBM WebSphere AS, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Oracle Java: vulnerabilities of July 2016
Synthesis of the vulnerability
An attacker can use several vulnerabilities of Oracle Java.
Impacted products: Debian, VNX Operating Environment, VNX Series, BIG-IP Hardware, TMOS, Fedora, AIX, Domino, Notes, IRAD, SPSS Statistics, Tivoli Storage Manager, Tivoli System Automation, WebSphere AS Traditional, IBM WebSphere ESB, WebSphere MQ, JAXP, ePO, Java OpenJDK, openSUSE, openSUSE Leap, Java Oracle, JavaFX, RHEL, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 3/4.
Consequences: privileged access/rights, user access/rights, data reading, data creation/edition, data deletion, denial of service on service, denial of service on client.
Provenance: user account.
Number of vulnerabilities in this bulletin: 13.
Creation date: 20/07/2016.
Identifiers: 1988339, 1988894, 1988978, 1989049, 1989337, 1990031, 1990448, 1991383, 1991909, 1991910, 1991911, 1991913, 1991997, 1995792, 1995799, 2001630, 2007242, 486953, CERTFR-2016-AVI-243, cpujul2016, CVE-2016-3458, CVE-2016-3485, CVE-2016-3498, CVE-2016-3500, CVE-2016-3503, CVE-2016-3508, CVE-2016-3511, CVE-2016-3550, CVE-2016-3552, CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610, DLA-579-1, DSA-3641-1, ESA-2016-099, FEDORA-2016-588e386aaa, FEDORA-2016-c07d18b2a5, FEDORA-2016-c60d35c46c, openSUSE-SU-2016:2050-1, openSUSE-SU-2016:2051-1, openSUSE-SU-2016:2052-1, openSUSE-SU-2016:2058-1, RHSA-2016:1458-01, RHSA-2016:1475-01, RHSA-2016:1476-01, RHSA-2016:1477-01, RHSA-2016:1504-01, RHSA-2016:1587-01, RHSA-2016:1588-01, RHSA-2016:1589-01, RHSA-2016:1776-01, SB10166, SOL05016441, SOL25075696, SUSE-SU-2016:1997-1, SUSE-SU-2016:2012-1, SUSE-SU-2016:2261-1, SUSE-SU-2016:2286-1, SUSE-SU-2016:2347-1, SUSE-SU-2016:2348-1, SUSE-SU-2016:2726-1, USN-3043-1, USN-3062-1, USN-3077-1, VIGILANCE-VUL-20169, ZDI-16-445, ZDI-16-446, ZDI-16-447, ZDI-16-448.
Description of the vulnerability
Several vulnerabilities were announced in Oracle Communications.
An attacker can use a vulnerability via Hotspot, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3587, ZDI-16-448]
An attacker can use a vulnerability via Hotspot, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3606, ZDI-16-447]
An attacker can use a vulnerability via Libraries, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3598, ZDI-16-446]
An attacker can use a vulnerability via Libraries, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3610, ZDI-16-445]
An attacker can use a vulnerability via Install, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3552]
An attacker can use a vulnerability via Deployment, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3511]
An attacker can use a vulnerability via Install, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3503]
An attacker can use a vulnerability via JavaFX, in order to trigger a denial of service. [severity:2/4; CVE-2016-3498]
An attacker can use a vulnerability via JAXP, in order to trigger a denial of service. [severity:2/4; CVE-2016-3500]
An attacker can use a vulnerability via JAXP, in order to trigger a denial of service. [severity:2/4; CVE-2016-3508]
An attacker can use a vulnerability via CORBA, in order to alter information. [severity:2/4; CVE-2016-3458]
An attacker can use a vulnerability via Hotspot, in order to alter information, or to trigger a denial of service. [severity:2/4; CVE-2016-3550]
An attacker can use a vulnerability via Networking, in order to alter information. [severity:1/4; CVE-2016-3485]
Full Vigil@nce bulletin... (Free trial) |
Oracle Fusion Middleware: vulnerabilities of July 2016
Synthesis of the vulnerability
An attacker can use several vulnerabilities of Oracle Fusion Middleware.
Impacted products: WebSphere AS Traditional, Oracle Communications, Oracle Directory Server, Oracle Fusion Middleware, Oracle GlassFish Server, Oracle Portal, Solaris, Oracle TopLink, WebLogic.
Severity: 3/4.
Consequences: user access/rights, data reading, data creation/edition, data deletion, denial of service on service, denial of service on client.
Provenance: user account.
Number of vulnerabilities in this bulletin: 22.
Creation date: 20/07/2016.
Identifiers: 7014463, cpuapr2019, cpujul2016, cpuoct2018, CVE-2015-3237, CVE-2015-7182, CVE-2016-1181, CVE-2016-1548, CVE-2016-2107, CVE-2016-3432, CVE-2016-3433, CVE-2016-3445, CVE-2016-3446, CVE-2016-3474, CVE-2016-3482, CVE-2016-3487, CVE-2016-3499, CVE-2016-3502, CVE-2016-3504, CVE-2016-3510, CVE-2016-3544, CVE-2016-3564, CVE-2016-3586, CVE-2016-3607, CVE-2016-3608, CVE-2016-5019, CVE-2016-5477, VIGILANCE-VUL-20164, ZDI-16-441, ZDI-16-442, ZDI-16-443, ZDI-16-444.
Description of the vulnerability
Several vulnerabilities were announced in Oracle Fusion Middleware.
An attacker can use a vulnerability via Oracle Directory Server Enterprise Edition, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2015-7182]
An attacker can use a vulnerability via Oracle GlassFish Server, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3607, ZDI-16-442]
An attacker can use a vulnerability via Oracle WebLogic Server, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3510, ZDI-16-443]
An attacker can use a vulnerability via Oracle WebLogic Server, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3586, ZDI-16-441]
An attacker can use a vulnerability via Oracle WebLogic Server, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3499, ZDI-16-444]
An attacker can use a vulnerability via Oracle JDeveloper, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3504, CVE-2016-5019]
An attacker can use a vulnerability via Oracle Business Intelligence Enterprise Edition, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3446]
An attacker can use a vulnerability via Oracle Portal, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-1181]
An attacker can use a vulnerability via Oracle TopLink, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3564]
An attacker can use a vulnerability via Oracle WebCenter Sites, in order to obtain information, to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-3487]
An attacker can use a vulnerability via Oracle Business Intelligence Enterprise Edition, in order to obtain or alter information. [severity:3/4; CVE-2016-3544]
An attacker can use a vulnerability via Oracle Exalogic Infrastructure, in order to alter information, or to trigger a denial of service. [severity:3/4; CVE-2016-1548]
An attacker can use a vulnerability via Oracle GlassFish Server, in order to obtain information, or to trigger a denial of service. [severity:2/4; CVE-2015-3237]
An attacker can use a vulnerability via Oracle WebCenter Sites, in order to obtain information, to alter information, or to trigger a denial of service. [severity:2/4; CVE-2016-3502]
An attacker can use a vulnerability via Oracle Access Manager, in order to obtain information. [severity:2/4; CVE-2016-2107]
An attacker can use a vulnerability via Oracle GlassFish Server, in order to obtain information. [severity:2/4; CVE-2016-3608]
An attacker can use a vulnerability via Oracle GlassFish Server, in order to obtain information. [severity:2/4; CVE-2016-5477]
An attacker can use a vulnerability via BI Publisher (formerly XML Publisher), in order to obtain or alter information. [severity:2/4; CVE-2016-3432]
An attacker can use a vulnerability via Oracle Business Intelligence Enterprise Edition, in order to obtain or alter information. [severity:2/4; CVE-2016-3433]
An attacker can use a vulnerability via Oracle WebLogic Server, in order to trigger a denial of service. [severity:2/4; CVE-2016-3445]
An attacker can use a vulnerability via BI Publisher (formerly XML Publisher), in order to obtain information. [severity:1/4; CVE-2016-3474]
An attacker can use a vulnerability via Oracle HTTP Server, in order to obtain information. [severity:1/4; CVE-2016-3482]
Full Vigil@nce bulletin... (Free trial) |
IBM WebSphere Application Server: information disclosure via JAX-RS API
Synthesis of the vulnerability
An attacker can use a vulnerability via JAX-RS API of IBM WebSphere Application Server, in order to obtain sensitive information.
Impacted products: WebSphere AS Traditional.
Severity: 1/4.
Consequences: data reading.
Provenance: document.
Creation date: 01/07/2016.
Identifiers: 1983700, CVE-2016-2923, VIGILANCE-VUL-20010.
Description of the vulnerability
The IBM WebSphere Application Server product offers a web service.
However, an attacker can make profit from the absence of the flag "HTTPOnly" to bypass access restrictions to cookies.
An attacker can therefore use a vulnerability via JAX-RS API of IBM WebSphere Application Server, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
WebSphere Application Server: privilege escalation via API Discovery
Synthesis of the vulnerability
An attacker can craft a Swagger document with external references via the Discovery API of WebSphere Application Server, in order to escalate his privileges.
Impacted products: WebSphere AS Traditional.
Severity: 2/4.
Consequences: administrator access/rights, privileged access/rights.
Provenance: document.
Creation date: 30/06/2016.
Identifiers: 1984502, CVE-2016-2945, VIGILANCE-VUL-20002.
Description of the vulnerability
The WebSphere Application Server product offers an API to development.
However, the API Discovery feature offers a security level weaker than expected when one use external references in a Swagger document.
An attacker can therefore craft a Swagger document with external references via the Discovery API of WebSphere Application Server, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
WebSphere Application Server: HTTP Response Splitting
Synthesis of the vulnerability
An attacker can use an HTTP Response Splitting, in order to alter HTTP responses of WebSphere AS, so he can obtain information for example.
Impacted products: WebSphere AS Traditional.
Severity: 2/4.
Consequences: data reading, data creation/edition.
Provenance: internet client.
Creation date: 29/06/2016.
Identifiers: 1982526, 7014463, CVE-2016-0359, VIGILANCE-VUL-19994.
Description of the vulnerability
The WebSphere Application Server product offers a web service.
However, an attacker can use a malicious query, to split the HTTP reply of the web service.
An attacker can therefore use an HTTP Response Splitting, in order to alter HTTP responses of WebSphere AS, so he can obtain information for example.
Full Vigil@nce bulletin... (Free trial) |
IBM WebSphere Application Server (Liberty Profile): information disclosure via "Admin Center"
Synthesis of the vulnerability
An attacker can use a vulnerability via the Admin Center of IBM WebSphere Application Server, in order to obtain sensitive information.
Impacted products: Security Directory Server, WebSphere AS Traditional.
Severity: 1/4.
Consequences: data reading.
Provenance: internet client.
Creation date: 28/06/2016.
Identifiers: 1982012, 1995259, CVE-2016-0389, VIGILANCE-VUL-19989.
Description of the vulnerability
The IBM product WebSphere Application Server Liberty Profile offers a web interface for administration.
However, an attacker can bypass access restrictions to data.
An attacker can therefore use a vulnerability via the Admin Center of IBM WebSphere Application Server, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
Apache Tomcat: denial of service via FileUpload
Synthesis of the vulnerability
An attacker can send files of a specially chosen size to Apache Tomcat, in order to overload the server.
Impacted products: Tomcat, Debian, Fedora, HP-UX, Domino, QRadar SIEM, Tivoli Storage Manager, Tivoli System Automation, Tivoli Workload Scheduler, WebSphere AS Traditional, IBM WebSphere ESB, WebSphere MQ, MariaDB ~ precise, MySQL Community, MySQL Enterprise, openSUSE Leap, Oracle Communications, Oracle Directory Server, Oracle Directory Services Plus, Oracle Fusion Middleware, Oracle GlassFish Server, Oracle Identity Management, Oracle iPlanet Web Server, Oracle OIT, Solaris, Tuxedo, Oracle Virtual Directory, WebLogic, Oracle Web Tier, Percona Server, Puppet, RHEL, JBoss EAP by Red Hat, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 2/4.
Consequences: denial of service on server, denial of service on service.
Provenance: internet client.
Creation date: 22/06/2016.
Identifiers: 1987864, 1989628, 1990172, 1991866, 1991867, 1991870, 1991871, 1991875, 1991876, 1991878, 1991880, 1991882, 1991884, 1991885, 1991886, 1991887, 1991889, 1991892, 1991894, 1991896, 1991902, 1991903, 1991951, 1991955, 1991959, 1991960, 1991961, 1992835, 1995388, 1995793, 2000095, 2000544, 2001563, 2012109, 2015814, 7014463, bulletinjul2016, c05324759, cpuapr2017, cpuapr2018, cpujul2017, cpujul2018, cpuoct2017, CVE-2016-3092, DLA-528-1, DLA-529-1, DSA-3609-1, DSA-3611-1, DSA-3614-1, FEDORA-2016-0a4dccdd23, FEDORA-2016-2b0c16fd82, HPSBUX03665, openSUSE-SU-2016:2252-1, RHSA-2016:2068-01, RHSA-2016:2069-01, RHSA-2016:2070-01, RHSA-2016:2071-01, RHSA-2016:2072-01, RHSA-2016:2599-02, RHSA-2016:2807-01, RHSA-2016:2808-01, RHSA-2017:0455-01, RHSA-2017:0456-01, RHSA-2017:0457-01, SUSE-SU-2017:1660-1, USN-3024-1, USN-3027-1, VIGILANCE-VUL-19953.
Description of the vulnerability
The Apache Tomcat product uses a slightly fork of the Apache Commons FileUpload library.
This library is used to receive files from an HTTP client to the server. However, when the file size is such that the size of the MIME envelope (file content + MIME headers) is equal to the size of the file reading buffer, the transfer requires an extremely long duration.
An attacker can therefore send files of a specially chosen size to Apache Tomcat, in order to overload the server.
Full Vigil@nce bulletin... (Free trial) |
Our database contains other pages. You can request a free trial to read them.
Display information about WebSphere Application Server Traditional:
|