Detections
Analytics
IBM WebSphere Portal 8.5.0 < 8.5.0 CF02 Multiple Vulnerabilities
high Nessus Plugin ID 79216
Language:
Synopsis
The remote Windows host has web portal software installed that is affected by multiple vulnerabilities.Description
The version of IBM WebSphere Portal installed on the remote host is affected by multiple vulnerabilities :- A remote code execution vulnerability exists in the Apache Struts ClassLoader. A remote attacker can exploit this issue by manipulating the 'class' parameter of an ActionForm object to execute arbitrary code.
(CVE-2014-0114)
- An unspecified information disclosure vulnerability exists which allows a remote attacker to gain access to sensitive information. (CVE-2014-3083)
- An information disclosure vulnerability exists which allows a remote, authenticated attacker to gain access to sensitive information, such as user credentials, through certain HTML pages. (CVE-2014-4761)
- An unspecified cross-site scripting vulnerability exists due to improper validation of user input. This can be exploited by a remote, authenticated attacker to execute code in the security context of a user's browser.
(CVE-2014-4762)
- An unrestricted file upload vulnerability exists which allows a remote, authenticated attacker to upload large files, potentially resulting in a denial of service.
(CVE-2014-4792)
- An unspecified cross-site scripting vulnerability exists that allows remote, authenticated attackers to execute arbitrary code via a specially crafted URL.
(CVE-2014-6093)
Solution
IBM has published a cumulative fix (CF02) for WebSphere Portal 8.5.0.0. Refer to IBM's advisory for more information.See Also
http://www-01.ibm.com/support/docview.wss?uid=swg21684652
http://www.nessus.org/u?aa26251e
Plugin Details
Severity: High
ID: 79216
File Name: websphere_portal_8_5_0_0_cf02.nasl
Version: 1.11
Type: local
Family: CGI abuses
Published: 11/12/2014
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:ibm:websphere_portal
Required KB Items: installed_sw/IBM WebSphere Portal
Exploit Available: true
Exploit Ease: No exploit is required
Patch Publication Date: 9/15/2014
Vulnerability Publication Date: 4/29/2014
Exploitable With
Metasploit (Apache Struts ClassLoader Manipulation Remote Code Execution)
Reference Information
CVE: CVE-2014-0114, CVE-2014-3083, CVE-2014-4761, CVE-2014-4762, CVE-2014-4792, CVE-2014-6093