CVSS: 5.0EPSS: 0%CPEs: 76EXPL: 0CVE-2010-0776
https://notcve.org/view.php?id=CVE-2010-0776
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request. El Web Container en IBM WebSphere Application Server (WAS) v6.0 anteriores a v6.0.2.43, v6.1 anteriores a v6.1.0.31, y v7.0 anteriores a v7.0.0.11 no maneja de forma adecuada la codificación de transferencias fragmentadas durante una llamada a response.sendRedirect, lo que permite a atacantes remotos provocar una denegación de servicio a través de una petición GET. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM08760 https://exchange.xforce.ibmcloud.com/vulnerabilities/58556 • CWE-20: Improper Input Validation •
CVSS: 1.9EPSS: 0%CPEs: 94EXPL: 0CVE-2010-1650
https://notcve.org/view.php?id=CVE-2010-1650
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output. IBM WebSphere Application Server (WAS) v6.0.x antes de v6.0.2.41, v6.1.x antes de v6.1.0.31 y v7.0.x antes de v7.0.0.11, cuando la opción -trace (esto es, el modo de depuración) está habilitada, imprime cadenas de debug de objetos no especificados, lo que permite a los atacantes obtener información sensible mediante la lectura de las trazas de salida. • http://secunia.com/advisories/39628 http://www-01.ibm.com/support/docview.wss?uid=swg1PM06839 http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 http://www.vupen.com/english/advisories/2010/0994 https://exchange.xforce.ibmcloud.com/vulnerabilities/58323 • CWE-310: Cryptographic Issues •
CVSS: 1.9EPSS: 0%CPEs: 46EXPL: 0CVE-2010-1651
https://notcve.org/view.php?id=CVE-2010-1651
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log. IBM WebSphere Application Server (WAS) v6.1.x antes de v6.1.0.31 y v7.0.x antes de v7.0.0.11, cuando estan habilitados la autenticación Basic y las trazas SIP (esto es, los logs para SIP estan completamente habilitados), almacena en los logs la totalidad de todos los mensajes SIP entrantes y salientes, lo que permite a usuarios locales obtener información sensible mediante la lectura del fichero de log. • http://secunia.com/advisories/39628 http://secunia.com/advisories/40096 http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892 http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 http://www.osvdb.org/65437 http://www.vupen.com/english/advisories/2010/1411 https://exchange.xforce.ibmcloud.com/vulnerabilities/58324 • CWE-310: Cryptographic Issues •
CVSS: 5.0EPSS: 2%CPEs: 86EXPL: 0CVE-2010-1612
https://notcve.org/view.php?id=CVE-2010-1612
The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address. The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, y XML Security Gateway XS40 SOA Appliances anterior a v3.8.0.0, cuando una interfaz Ethernet QLOGIC se utiliza, permite a atacantes remotos provocar una denegación de servicio (corte de interfaz) a través de paquetes ICMP malformados a la dirección IP de destino 0.0.0.0. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC61364 http://www-01.ibm.com/support/docview.wss?uid=swg24024770 http://www-01.ibm.com/support/docview.wss?uid=swg24024771 http://www-01.ibm.com/support/docview.wss?uid=swg24024772 http://www-01.ibm.com/support/docview.wss? •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2010-0772
https://notcve.org/view.php?id=CVE-2010-0772
Unspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows remote authenticated users to cause a denial of service (daemon crash) via "incorrect channel control data." Una vulnerabilidad no especificada en el proceso de canales en IBM WebSphere MQ v7.0 antes v7.0.1.2 permite a usuarios remotos autenticados causar una denegación de servicio (mediante caida del demonio) a través de "datos incorrectos en el canal de control." • http://securitytracker.com/id?1023961 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ68621 http://www.vupen.com/english/advisories/2010/1083 https://exchange.xforce.ibmcloud.com/vulnerabilities/58039 •