IBM WebSphere Portal 8.x < 8.0.0.1 CF12 Multiple Vulnerabilities

high Nessus Plugin ID 74156

Language:

Synopsis

The remote Windows host has web portal software installed that is affected by multiple vulnerabilities.

Description

The version of IBM WebSphere Portal on the remote host is affected by multiple vulnerabilities :

- A denial of service vulnerability exists in the Apache Commons FileUpload library that allows an attacker to cause the application to enter an infinite loop.
(CVE-2014-0050)

- An unspecified denial of service vulnerability exists that allows a remote attacker to crash the host by sending a specially crafted web request.
(CVE-2014-0949)

- A cross-site scripting (XSS) vulnerability exists in the 'FilterForm.jsp' script due to improper user input validation. (CVE-2014-0951)

- An XSS vulnerability exists in the 'boot_config.jsp' script due to improper user input validation.
(CVE-2014-0952)

- An unspecified XSS vulnerability exists due to improper validation of user input. (CVE-2014-0953)

- A privilege escalation vulnerability exists in the Web Content Viewer portlet due to improper handling of JSP includes. A remote attacker can exploit this issue to obtain sensitive information, cause a denial of service, or control the request dispatcher by sending a specially crafted URL request. (CVE-2014-0954)

- An XSS vulnerability exists in the Social Rendering feature due to improper validation of user input. Note that this only affects installs using IBM Connections with the Social Rendering feature. (CVE-2014-0955)

- An unspecified XSS vulnerability exists due to improper validation of user input in a JSP script.
(CVE-2014-0956)

- An unspecified open redirect vulnerability exists that allows an attacker to perform a phishing attack by enticing a user to click on a malicious URL.
(CVE-2014-0958)

- An unspecified denial of service vulnerability exists that allows an authenticated attacker to cause a successful login to loop back to the login page indefinitely. (CVE-2014-0959)

An attacker can exploit the XSS vulnerabilities to execute code in the security context of a user's browser in order to steal authentication cookies.

Solution

IBM has published a cumulative fix for WebSphere Portal 8.0.0.1 (CF12). Refer to IBM's advisory for more information.

Plugin Details

Severity: High

ID: 74156

File Name: websphere_portal_8_0_0_1_cf12.nasl

Version: 1.13

Type: local

Family: CGI abuses

Published: 5/23/2014

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:ibm:websphere_portal

Required KB Items: installed_sw/IBM WebSphere Portal

Exploit Available: true

Exploit Ease: No exploit is required

Patch Publication Date: 5/13/2014

Vulnerability Publication Date: 2/6/2014

Reference Information

CVE: CVE-2014-0050, CVE-2014-0949, CVE-2014-0951, CVE-2014-0952, CVE-2014-0953, CVE-2014-0954, CVE-2014-0955, CVE-2014-0956, CVE-2014-0958, CVE-2014-0959

BID: 65400, 67412, 67413, 67414, 67415, 67417, 67418, 67419, 67421, 69042

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990

Detections

Analytics