CERTA-2008-AVI-226

Vulnerability from certfr_avis - Published: 2008-05-02 - Updated: 2008-05-02

Une vulnérabilité dans IBM Websphere Appication Server permet à un individu malveillant d'effectuer une élevation de privilèges.

Description

Une vulnérabilité due à une erreur non spécifée dans le module JAVA d'IBM WebSphere Application Server a été découverte. Celle-ci permet une élevation de privilèges via une appliquette spécialement conçue.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

IBM WebSphere Application Server 5.x.

Impacted products
Vendor Product Description

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eIBM WebSphere Application Server 5.x.\u003c/P\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 due \u00e0 une erreur non sp\u00e9cif\u00e9e dans le module JAVA\nd\u0027IBM WebSphere Application Server a \u00e9t\u00e9 d\u00e9couverte. Celle-ci permet une\n\u00e9levation de privil\u00e8ges via une appliquette sp\u00e9cialement con\u00e7ue.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-05-02T00:00:00",
  "last_revision_date": "2008-05-02T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM swg1PK65161 du 28 avril 2008 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161"
    }
  ],
  "reference": "CERTA-2008-AVI-226",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-05-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans \u003cspan class=\"textit\"\u003eIBM Websphere Appication\nServer\u003c/span\u003e permet \u00e0 un individu malveillant d\u0027effectuer une \u00e9levation\nde privil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans IBM WebSphere Application Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM PK65161 du 28 avril 2008",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…