CVSS: 6.8EPSS: 0%CPEs: 51EXPL: 0CVE-2012-3304
https://notcve.org/view.php?id=CVE-2012-3304
The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors. La consola de administración de IBM WebSphere Application Server (WAS) v6.1 antes de v6.1.0.45, v7.0 antes de v7.0.0.25, v8.0 antes de v8.0.0.5, y v8.5 antes de v8.5.0.1 permite a los atacantes remotos secuestrar sesiones a través de vectores no especificados. • http://osvdb.org/85733 http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356 http://www.ibm.com/support/docview.wss?uid=swg21611313 https://exchange.xforce.ibmcloud.com/vulnerabilities/77476 •
CVSS: 3.3EPSS: 0%CPEs: 52EXPL: 0CVE-2012-3311
https://notcve.org/view.php?id=CVE-2012-3311
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users to bypass intended access restrictions, and read or modify application data, via unspecified vectors. IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.45, 7.0 anteriores a v7.0.0.25, 8.0 anteriores a v8.0.0.5, y 8.5 anteriores a v8.5.0.1 en z/OS, en ciertas configuraciones que implican Federated Repositories para conexiones IIOP y Optimized Local Adapters, no hacen las comprobaciones CBIND, lo que permite a usuarios locales evitar las restricciones de acceso establecidas, y leer y modificar datos de aplicaciones, a través de vectores no específicos. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM61388 http://www.ibm.com/support/docview.wss?uid=swg21611313 http://www.securityfocus.com/bid/55671 https://exchange.xforce.ibmcloud.com/vulnerabilities/77697 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 2.6EPSS: 0%CPEs: 6EXPL: 0CVE-2012-3300
https://notcve.org/view.php?id=CVE-2012-3300
IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. IBM WebSphere Commerce v7.0 antes de v7.0.0.6, cuando se habilitan las sesiones persistentes y los identificadores de personalización, permite a atacantes remotos provocar una denegación de servicio (consumo de recursos) a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1JR42771 http://www.ibm.com/support/docview.wss?uid=swg21610909 https://exchange.xforce.ibmcloud.com/vulnerabilities/77382 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2012-3298
https://notcve.org/view.php?id=CVE-2012-3298
Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Vulnerabilidad no especificada en en entorno de trabajo de servicios REST en IBM WebSphere Commerce v7.0 Feature Pack 4 permite a atacantes remotos obtener información sensible, modificar datos o provocar una denegación de servicio a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1JR42770 http://www.ibm.com/support/docview.wss?uid=swg21610905 https://exchange.xforce.ibmcloud.com/vulnerabilities/77294 •
CVSS: 6.8EPSS: 0%CPEs: 51EXPL: 0CVE-2012-3306
https://notcve.org/view.php?id=CVE-2012-3306
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors. IBM WebSphere Application Server (WAS) v6.1 antes de v6.1.0.45, v7.0 antes de v7.0.0.25, v8.0 antes de v8.0.0.5, y v8.5 antes de v8.5.0.1, cuando el soporte multi-dominio está configurado, no elimina la contraseña de la caché de autenticación, lo cual tiene un impacto no especificado y vectores de ataque remotos. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM66514 http://www.ibm.com/support/docview.wss?uid=swg21611313 https://exchange.xforce.ibmcloud.com/vulnerabilities/77478 • CWE-255: Credentials Management Errors •