The IBM WebSphere Application Server running on the remote host is version 6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 or prior. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists in the     SNMP component due to improper handling of configuration     data. An authenticated, remote attacker can exploit this     disclose sensitive information. (CVE-2015-0174)

  - An unspecified flaw exists in the liberty profile due to     improper handling of authData elements. An     authenticated, remote attacker can exploit this to gain     elevated privileges. (CVE-2015-0175)

  - An unspecified flaw exists in the liberty profile that     is triggered when the run-as user for EJB is not honored     under multi-threaded race conditions. An authenticated,     remote attacker can exploit this to gain elevated     privileges. (CVE-2015-1882)

  - A flaw exists that allows a remote attacker to execute     arbitrary code by connecting to a management port using     a specific sequence of instructions. (CVE-2015-1920)

远程主机上运行的 IBM WebSphere Application Server 版本为 6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 或较早版本。因此，它受到多种漏洞的影响：

- 由于未正确处理配置数据，SNMP 组件中存在一个信息泄露漏洞。经过认证的远程攻击者可利用此漏洞泄露敏感信息。(CVE-2015-0174)

- 由于未正确处理 authData 元素，liberty 配置文件中存在一个不明缺陷。经认证的远程攻击者可利用此问题获得提升的权限。(CVE-2015-0175)

- liberty 配置文件中存在一个不明缺陷，该缺陷在多线程的争用条件下未遵循 EJB 的以用户身份运行时触发。经认证的远程攻击者可利用此问题获得提升的权限。(CVE-2015-1882)

- 存在一个缺陷，允许远程攻击者通过使用特定指令序列连接到管理端口来执行任意代码。(CVE-2015-1920)

遠端主機上執行的 IBM WebSphere Application Server 版本是 6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 或更舊版本。因此，會受到多個弱點影響：

- SNMP 元件中存在一個因不當處理組態資料而導致的資訊洩漏弱點。經過驗證的遠端攻擊者可惡意利用此弱點洩漏敏感資訊。(CVE-2015-0174)

- liberty 設定檔存在一個因不當處理 authData 元素而導致的不明瑕疵。經驗證的遠端攻擊者可惡意利用此瑕疵來取得提升的權限。(CVE-2015-0175)

- liberty 設定檔存在一個不明瑕疵，系統在多執行緒爭用情形下未接受 EJB 的使用者執行身分時，便會觸發此瑕疵。經驗證的遠端攻擊者可惡意利用此瑕疵來取得提升的權限。(CVE-2015-1882)

- 存在一個瑕疵，其允許遠端攻擊者使用特定指示序列，連線至管理連接埠，從而執行任意程式碼。(CVE-2015-1920)

リモートホストで実行されている IBM WebSphere Application Server のバージョンは、6.1.0.47 / 7.0.0.37 / 8.0.0.10 / 8.5.5.5 またはそれ以前です。したがって、以下の複数の脆弱性による影響を受けます：

- 構成データの不適切な処理によって、SNMP コンポーネントに情報漏洩の脆弱性が存在します。認証された、リモートの攻撃者がこれを悪用して、機密情報を漏洩させる可能性があります。(CVE-2015-0174)

- authData 要素の不適切な処理のため、liberty プロファイルに詳細不明な欠陥が存在しています。認証されているリモートの攻撃者がこれを悪用して、昇格された権限を取得する可能性があります。(CVE-2015-0175)

- マルチスレッド競合状態で EJB の run-as ユーザーが優先されない場合に引き起こされる詳細不明な欠陥が、liberty プロファイルに存在しています。認証されているリモートの攻撃者がこれを悪用して、昇格された権限を取得する可能性があります。(CVE-2015-1882)

- リモートの攻撃者が、特定のシーケンスの指示を使用して管理ポートに接続することで、任意のコードを実行することができる、欠陥が存在しています。(CVE-2015-1920)

The remote host appears to be running IBM WebSphere Application Server 7.0 prior to 7.0.0.39. Such versions are potentially affected by multiple issues :

 - A flaw exists that is triggered as deployment descriptor security constraints are combined with 'ServletSecurity' annotations on a servlet. This may allow a remote attacker to gain elevated privileges. (CVE-2014-8890)
 - A security feature bypass vulnerability, known as FREAK (Factoring attack on RSA-EXPORT Keys), exists in the IBM Global Security Kit (GSKit) due to the support of weak EXPORT_RSA cipher suites with keys less than or equal to 512 bits.  A man-in-the-middle (MitM) attacker may be able to downgrade the SSL/TLS connection to use EXPORT_RSA cipher suites which can be factored in a short amount of time, allowing the attacker to intercept and decrypt the traffic. (CVE-2015-0138)
 - An information disclosure vulnerability exists due to a flaw in the Bleichenbacher countermeasure implementation in Apache WSS4J.  A remote attacker can exploit this, via a crafted message, to determine where an encryption failure took place, allowing the attacker to gain access to the plaintext symmetric key. (CVE-2015-0226)
 - An XML External Entity (XXE) vulnerability exists due to an incorrectly configured XML parser that accepts XML external entities from an untrusted source.  A remote attacker can exploit this, via specially crafted XML data, to gain access to arbitrary files. (CVE-2015-0250)
 - A privilege escalation vulnerability exists due to a flaw that occurs in 'full' profile and 'liberty' profile when using an OAuth grant password.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1885)
 - A privilege escalation vulnerability exists due to incorrect settings in the 'serveServletsbyClassname' functionality.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1927)
 - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to identify the proxy server software by reading the HTTP 'Via' header. (CVE-2015-1932)
 - An unspecified flaw exists in the administrative console that allows a remote attacker, via the 'JSESSIONID' parameter, to hijack a user's session. (CVE-2015-1936)
 - A privilege escalation vulnerability exists due to an unspecified flaw that occurs when handling user roles.  A local attacker can exploit this to gain elevated privileges. (CVE-2015-1946)
 - A flaw exists that is triggered as CRLF (Carriage Return and Line Feed) character sequences are not properly sanitized before being included in HTTP responses.  This allows a remote attacker to inject additional headers into responses to conduct HTTP response splitting attacks. (CVE-2015-2017)
 - A security feature bypass vulnerability exists, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase.  A MitM attacker can exploit this, via a brute-force attack using LSB values, to decrypt the traffic. (CVE-2015-2808)
 - An unspecified flaw exists that allows an unauthenticated, remote attacker to spoof servlets or disclose sensitive information. (CVE-2015-4938)
 - An unspecified exists flaw in the 'Management' port. This may allow a remote attacker to execute arbitrary code. No further details have been provided by the vendor. (CVE-2015-1920)

ID	名稱	產品	系列	已發布	已更新	嚴重性
83290	IBM WebSphere Application Server Multiple Vulnerabilities	Nessus	Web Servers	2015/5/8	2019/11/22	critical
83290	IBM WebSphere Application Server 多种漏洞	Nessus	Web Servers	2015/5/8	2019/11/22	critical
83290	IBM WebSphere Application Server 多個弱點	Nessus	Web Servers	2015/5/8	2019/11/22	critical
83290	IBM WebSphere Application Server の複数の脆弱性	Nessus	Web Servers	2015/5/8	2019/11/22	critical
9700	IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)	Nessus Network Monitor	Web Servers	2016/10/26	2019/3/6	high

偵測

搜尋 Plugin

critical

critical

critical

critical

high