IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.

IBM WebSphere Application Server 8.0 before Fix Pack 5 appears to be running on the remote host.  It is, therefore, potentially affected by the following vulnerabilities :

  - An unspecified error exists related to the     Administrative Console that can allow an attacker to     hijack sessions. (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to Federated Repositories for     IIOP connections, Optimized Local Adapters and CBIND     checking that can allow a local attacker to access or     modify arbitrary files. Note this issue only affects the     application when hosted on z/OS. (CVE-2012-3311,     PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

  - A request validation error exists related to the proxy     server component that could allow a remote attacker to     cause the proxy status to be reported as disabled, thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, PM66410)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)  
  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296) 

  - A request validation error exists related to the proxy     server component that can allow a remote attacker to     cause the proxy status to be reported as disabled thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

  - A request validation error exists related to the     'Liberty Profile' and 'JAX-RS' that can allow a remote     attacker to elevate privileges. (CVE-2012-4850, PM67082)

  - A user-supplied input validation error exists related     to the 'Liberty Profile' that can allow cross-site     scripting attacks to be carried out. (CVE-2012-4851,     PM68643)

  - A user-supplied input validation error exists that can     allow cross-site request forgery (CSRF) attacks to be     carried out. (CVE-2012-4853, PM62920)

IBM WebSphere Application Server 7.0 before Fix Pack 25 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - An error exists related to 'Application Snoop Servlet'     and missing access controls. This error can allow     sensitive information to be disclosed. Note that     exploiting this issue requires that the default     'Application Snoop Servlet' be installed and running.
    (CVE-2012-2170, PM56183)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

ID	Name	Product	Family	Severity
64380	IBM WebSphere Application Server 8.0 < Fix Pack 5 Multiple Vulnerabilities	Nessus	Web Servers	medium
62975	IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Web Servers	high
62413	IBM WebSphere Application Server 7.0 < Fix Pack 25 Multiple Vulnerabilities	Nessus	Web Servers	medium
62394	IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2012-3306

critical

Tenable Plugins

medium

high

medium

medium