{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eIBM Websphere Application Server  versions 5.0.2.10 et ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nIBM Websphere Application Server est un serveur d\u0027applications certifi\u00e9\nJ2EE.\n\nUne faille de type d\u00e9bordement de m\u00e9moire est pr\u00e9sente dans le code\nr\u00e9alisant l\u0027authentification de l\u0027acc\u00e8s \u00e0 la console d\u0027administration du\nserveur d\u0027applicaions IBM Websphere. Au moyen de requ\u00eates habilement\nconstitu\u00e9es, un utilisateur mal intentionn\u00e9 peut exploiter cette\nvuln\u00e9rabilit\u00e9 pour ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nLa version 5.0.2.11 d\u0027IBM WebSphere Application Server corrige cette\nvuln\u00e9rabilit\u00e9.\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs.\n",
  "cves": [],
  "initial_release_date": "2005-06-09T00:00:00",
  "last_revision_date": "2005-06-09T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM #4009775 du 27 mai 2005 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24009755"
    }
  ],
  "reference": "CERTA-2005-AVI-198",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-06-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 d\u0027IBM Websphere Application Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Secunia SA15598",
      "url": "http://secunia.com/advisories/15598"
    }
  ]
}