CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2008-2221
https://notcve.org/view.php?id=CVE-2008-2221
Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors. Vulnerabilidad no especificada en la extensión (plugin) Java de IBM WebSphere Application Server 5.0.2 permite a applets no confiables conseguir privilegios a través de vectores no especificados. • http://secunia.com/advisories/29976 http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161 http://www.securityfocus.com/bid/28997 http://www.securitytracker.com/id?1019956 http://www.vupen.com/english/advisories/2008/1411/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42116 •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2008-0740
https://notcve.org/view.php?id=CVE-2008-0740
IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file. IBM WebSphere Application Server (WAS) versiones anteriores a 6.0.2 Fix Pack 25 (6.0.2.25) escribe información sin especificar en texto claro en http_plugin.log, lo cual permite a usuarios locales obtener información sensible leyendo ese fichero. • http://osvdb.org/42878 http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785 http://www-1.ibm.com/support/docview.wss?uid=swg27006876 http://www-1.ibm.com/support/docview.wss?uid=swg27007951 http://www.securityfocus.com/bid/27400 http://www.vupen.com/english/advisories/2008/0241 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2008-0741
https://notcve.org/view.php?id=CVE-2008-0741
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors. Vulnerabilidad sin especificar en la utilidad PropFilePasswordEncoder de IBM WebSphere Application Server (WAS) antes de 6.0.2 Fix Pack 25 (6.0.2.25). El impacto y los vectores de ataque son desconocidos. • http://secunia.com/advisories/28588 http://securitytracker.com/id?1019254 http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK52709&uid=swg1PK58871&loc=en_US&cs=utf-8&lang= http://www-1.ibm.com/support/docview.wss?uid=swg27006876 http://www.securityfocus.com/bid/27400 http://www.vupen.com/english/advisories/2008/0241 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 1%CPEs: 40EXPL: 0CVE-2008-0389
https://notcve.org/view.php?id=CVE-2008-0389
Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors. Una vulnerabilidad no especificada en la función serveServletsByClassnameEnabled en IBM WebSphere Application Server (WAS) versiones 6.0 hasta 6.0.2.25, versiones 6.1 hasta 6.1.0.14 y versiones 5.1.1.x anteriores a 5.1.1.18, presenta un impacto desconocido y vectores de ataque. • http://secunia.com/advisories/28576 http://secunia.com/advisories/29687 http://www-1.ibm.com/support/docview.wss?uid=swg24018067 http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118 http://www.securityfocus.com/bid/27371 http://www.securitytracker.com/id?1019251 http://www.securitytracker.com/id?1019894 http://www.vupen.com/english/advisories/2008/0219 http://www.vupen.com/english/advisories/2008/1133 https://exchange.xforce.ibmcloud.com/vulnerabilities/39808 •
CVSS: 10.0EPSS: 0%CPEs: 9EXPL: 0CVE-2007-6679
https://notcve.org/view.php?id=CVE-2007-6679
Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected. Una vulnerabilidad no especificada en la Consola Administrativa en IBM WebSphere Application Server versión 6.1 anterior a Fix Pack 13, presenta vectores de ataques e impactos desconocidos, relacionados a "security concerns with monitor role users." NOTA: más tarde se reportó que las versión 6.0.2 anterior a Fix Pack 25 también esta afectado • http://secunia.com/advisories/28588 http://securitytracker.com/id?1019174 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/docview.wss?uid=swg27006876 http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only http://www.vupen.com/english/advisories/2007/3955 http://www.vupen.com/english/advisories/2008/0241 •