CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2006-5324
https://notcve.org/view.php?id=CVE-2006-5324
The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374. El componente de seguridad Web Services Notification (WSN) de IBM WebSphere Application Server anterior a 6.1.0.2 permite a atacantes obtener acceso no especificado sin suministrar nombre de usuario y contraseña, también conocido como PK28374. • http://secunia.com/advisories/22372 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only http://www.vupen.com/english/advisories/2006/4000 •
CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2006-4223
https://notcve.org/view.php?id=CVE-2006-4223
IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137. IBM WebSphere Application Server anterior a 6.0.2.13 permiet a atacantes locales o remotos (dependiendo del contexto) obtener información sensible a través de vectores no especificados relacionados con (1) "exposición de código fuente JSTP" (PK23475), (2) el archivo de registro de la Captura de Datos del Primer Fallo (First Failure Data Capture)(ffdc)(PK24834), y (3) trazas (PK25568), un problema distinto de CVE-2006-4137. • http://secunia.com/advisories/21487 http://secunia.com/advisories/24478 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 http://www-1.ibm.com/support/docview.wss?uid=swg21243541 http://www-1.ibm.com/support/docview.wss?uid=swg24013827 http://www.securityfocus.com/bid/22991 http://www.vupen.com/english/advisories/2006/3281 http://www.vupen.com/english/advisories/2007/0970 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2006-4222
https://notcve.org/view.php?id=CVE-2006-4222
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123. Múltiples vulnerabilidades no especificadas en el servidor de aplicaciones IBM WebSphere Application Server anterior a 6.0.2.13 tienen vectores e impacto no especificados, incluyendo (1) un "problema de autoridad" en ThreadIdentitySupport como se ha identificado en PK25199, y "Potenciales problemas de exposición de seguridad" como identifican (2) PK22747, (3) PK24334, (4) PK25740, y (5) PK26123. • http://secunia.com/advisories/21487 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 http://www.vupen.com/english/advisories/2006/3281 •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2006-4136
https://notcve.org/view.php?id=CVE-2006-4136
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others. Múltiples vulnerabilidades no especificadas en IBM WebSphere Application Server anterior a 6.1.0.1 tienen impacto no especificado y vectores de ataque relacionados con (1) "peticiones y respuestas SOAP", (2) mbean, (2) ThreadIdentitySupport, y posiblemente otros. • http://secunia.com/advisories/21440 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only http://www.securityfocus.com/bid/19463 http://www.vupen.com/english/advisories/2006/3262 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 16EXPL: 0CVE-2006-4137
https://notcve.org/view.php?id=CVE-2006-4137
IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces. IBM WebSphere Application Server anteior a 6.1.0.1 permite a atacantes obtener información sensible mediante vectores no especificados relacionados con (1) el archivo de registro (log), (2) "sintaxis generada por secuencia de comandos en la línea de comandos wsadmin", y (3) trazas. • http://secunia.com/advisories/21440 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only http://www.securityfocus.com/bid/19463 http://www.vupen.com/english/advisories/2006/3262 •