Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks.

IBM WebSphere Application Server 6.1 before Fix Pack 23 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities :

  - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. (PK66676)

  - It may be possible for a remote attacker to redirect users to arbitrary sites using ibm_security_logout servlet. (PK71126) 

  - Under certain conditions it may be possible to access administrative console user sessions. (PK74966)

  - If APAR PK41002 has been applied, an unspecified vulnerability in JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'. (PK75992)

  - Sample applications shipped with IBM WebSphere Application Server are affected by cross-site scripting vulnerabilities. (PK76720)

  - The adminitrative console is affected by a cross-site scripting vulnerability. (PK77505)

  - It may be possible for an attacker to read arbitrary application-specific war files. (PK81387)

  - A session highjacking vulnerability exists in the 'forced logout' feature. (PK74966)

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities :

  - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. (PK66676)

  - The PerfServlet code writes sensitive information in the 'systemout.log' and ffdc files, provided Performance Monitoring Infrastructure (PMI) is enabled. (PK63886)

  - It may be possible to login to the administrative console using a user account that is locked by the operating system. (PK67909)

  - An unknown vulnerability affects z/OS-based IBM WebSphere application servers. (PK71143)

  - An unspecified vulnerability in the administrative console could allow arbitrary file retrieval from the remote system. (PK72036)

  - If APAR PK41002 has been applied, an unspecified vulnerability in JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'. (PK75992)

  - Certain files associated with interim fixes for Unix-based versions of IBM WebSphere Application Server are built with insecure file permissions. (PK78960)

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host.  As such, it is reportedly affected by multiple vulnerabilities :

  - Provided an attacker has valid credentials, it may be     possible to hijack an authenticated session. (PK66676)

  - The PerfServlet code writes sensitive information in     the 'systemout.log' and ffdc files, provided     Performance Monitoring Infrastructure (PMI) is enabled.
    (PK63886)

  - It may be possible to login to the administrative     console using a user account that is locked by the     operating system. (PK67909)

  - An unknown vulnerability affects z/OS-based IBM     WebSphere application servers. (PK71143)

  - An unspecified vulnerability in the administrative     console could allow arbitrary file retrieval from the     remote system. (PK72036)

  - If APAR PK41002 has been applied, a vulnerability in     the JAX-RPC WS-Security component could incorrectly     validate 'UsernameToken'. (PK75992)

  - Certain files associated with interim fixes for Unix-     based versions of IBM WebSphere Application Server are     built with insecure file permissions. (PK78960)

ID	Name	Product	Family	Severity
4996	IBM WebSphere Application Server < 6.1.0.23 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
4990	IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
36132	IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities	Nessus	Web Servers	high

Detections

Analytics

CVE-2009-0506

high

Tenable Plugins

high

high

high