IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a "Signature Wrap attack," a different vulnerability than CVE-2011-1377 and CVE-2013-0489.

IBM WebSphere Application Server 8.5 before Fix Pack 8.5.5 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - The TLS protocol in the GSKIT component is vulnerable     to a plaintext recovery attack. (CVE-2013-0169, PM85211)

  - The WS-Security run time contains a flaw that could be     triggered by a specially crafted SOAP request to execute     arbitrary code. (CVE-2013-0482, PM76582)

  - A flaw exists relating to OAuth that could allow a     remote attacker to obtain someone else's credentials.
    (CVE-2013-0597, PM85834, PM87131)

  - A flaw exists relating to OpenJPA that is triggered     during deserialization, which could allow a remote     attacker to write to the file system and potentially     execute arbitrary code. (CVE-2013-1768, PM86780,     PM86786, PM86788, PM86791)

  - An unspecified cross-site scripting vulnerability exists     related to the administrative console. (CVE-2013-2967,     PM78614)

  - An unspecified vulnerability exists.  (CVE-2013-2975)

  - An information disclosure vulnerability exists relating     to incorrect caching by the administrative console.
    (CVE-2013-2976, PM79992)

  - An improper process initialization flaw exists on UNIX     platforms that could allow a local attacker to execute     arbitrary commands. (CVE-2013-3024, PM86245)

IBM WebSphere Application Server 7.0 before Fix Pack 29 appears to be running on the remote host.  It is, therefore, potentially affected by the following vulnerabilities :

  - The TLS protocol in the GSKIT component is vulnerable     to a plaintext recovery attack. (CVE-2013-0169, PM85211)

  - The WS-Security run time contains a flaw that could be     triggered by a specially crafted SOAP request to execute     arbitrary code. (CVE-2013-0482, PM76582)

  - A denial of service vulnerability exists, caused by a     buffer overflow on localOS registry when using WebSphere     Identity Manager (WIM). (CVE-2013-0541, PM74909)

  - An unspecified cross-site scripting vulnerability exists     related to the administrative console. (CVE-2013-0542,     CVE-2013-2967, PM78614, PM81846)

  - A validation flaw exists relating to 'Local OS     registries' that may allow a remote attacker to bypass     security. (CVE-2013-0543, PM75582)

  - A directory traversal vulnerability exists in the     administrative console via the 'PARAMETER' parameter.
    (CVE-2013-0544, PM82468)

  - A flaw exists relating to OAuth that could allow a     remote attacker to obtain someone else's credentials.
    (CVE-2013-0597, PM85834, PM87131)

  - A flaw exists relating to OpenJPA that is triggered     during deserialization that may allow a remote attacker     to write to the file system and potentially execute     arbitrary code. (CVE-2013-1768, PM86780, PM86786,     PM86788, PM86791)

  - An information disclosure issue exists relating to     incorrect caching by the administrative console.
    (CVE-2013-2976, PM79992)

  - A user-supplied input validation error exists that could     allow cross-site request (CSRF) attacks to be carried     out. (CVE-2013-3029, PM88746)

IBM WebSphere Application Server 8.5 before Fix Pack 2 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - The included Java SDK contains several errors that     affect the application directly. (CVE-2013-0169,     CVE-2013-0440, CVE-2013-0443)

  - Input validation errors exist related to the     administration console that could allow cross-site     scripting attacks. (CVE-2013-0458 / PM71139,     CVE-2013-0461 / PM71389, CVE-2013-0542 / PM81846,     CVE-2013-0565 / PM83402)

  - An input validation error exists related to the     administration console that could allow cross-site     scripting attacks. Note that this issue affects only     the application when running on z/OS operating systems.
    (CVE-2013-0459 / PM72536)

  - An unspecified error could allow security bypass for     authenticated users. (CVE-2013-0462 / PM76886 or     PM79937)

  - An error exists related to 'WS-Security' and SOAP     message handling that could allow an attacker to spoof     message signatures. (CVE-2013-0482 / PM76582)

  - An error exists related to authentication cookies that     could allow remote attackers to gain access to     restricted resources. Note this only affects the     application when running the 'Liberty Profile'.
    (CVE-2013-0540 / PM81056)

  - A buffer overflow error exists related to 'WebSphere     Identity Manger (WIM)' that could allow denial of     service attacks. (CVE-2013-0541 / PM74909)

  - An unspecified error could allow security bypass, thus     allowing remote attackers access to restricted resources     on HP, Linux and Solaris hosts.
    (CVE-2013-0543 / PM75582)

  - An unspecified error related to the administration     console could allow directory traversal attacks on     Unix and Linux hosts. (CVE-2013-0544 / PM82468)

IBM WebSphere Application Server 8.0 before Fix Pack 6 appears to be running on the remote host.  It is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists that could allow     cross-site request forgery (CSRF) attacks.
    (CVE-2012-4853 / PM62920)

  - The included Java SDK contains several errors that     affect the application directly. (CVE-2013-0169,     CVE-2013-0440, CVE-2013-0443)

  - Input validation errors exist related to the     administration console that could allow cross-site     scripting attacks. (CVE-2013-0458 / PM71139,     CVE-2013-0461 / PM71389, CVE-2013-0542 / PM81846)

  - An input validation error exists related to the     administration console that could allow cross-site     scripting attacks. Note that this issue affects only     the application when running on z/OS operating systems.
    (CVE-2013-0459 / PM72536)

  - An unspecified error could allow security bypass for     authenticated users. (CVE-2013-0462 / PM76886 or     PM79937)

  - An error exists related to 'WS-Security' and SOAP     message handling that could allow an attacker to spoof     message signatures. (CVE-2013-0482 / PM76582)

  - A buffer overflow error exists related to 'WebSphere     Identity Manger (WIM)' that could allow denial of     service attacks. (CVE-2013-0541 / PM74909)

  - An unspecified error could allow security bypass, thus     allowing remote attackers access to restricted resources     on HP, Linux and Solaris hosts.
    (CVE-2013-0543 / PM75582)

  - An unspecified error related to the administration     console could allow directory traversal attacks on     Unix and Linux hosts. (CVE-2013-0544 / PM82468)

ID	Name	Product	Family	Severity
69021	IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5 Multiple Vulnerabilities	Nessus	Web Servers	high
68982	IBM WebSphere Application Server 7.0 < Fix Pack 29 Multiple Vulnerabilities	Nessus	Web Servers	high
66375	IBM WebSphere Application Server 8.5 < Fix Pack 2 Multiple Vulnerabilities	Nessus	Web Servers	critical
66374	IBM WebSphere Application Server 8.0 < Fix Pack 6 Multiple Vulnerabilities	Nessus	Web Servers	critical

Detections

Analytics

CVE-2013-0482

medium

Tenable Plugins

high

high

critical

critical