IBM WebSphere Application Server 6.1 before Fix Pack 23 appears to be installed on the remote host.  Such versions are reportedly affected by multiple vulnerabilities :

  - Provided an attacker has valid credentials, it may be     possible to hijack an authenticated session. (PK66676)

  - It may be possible for a remote attacker to redirect     users to arbitrary sites using ibm_security_logout     servlet. (PK71126)

  - Under certain conditions it may be possible to access     administrative console user sessions. (PK74966)

  - If APAR PK41002 has been applied, a vulnerability in     the JAX-RPC WS-Security component could incorrectly     validate 'UsernameToken'. (PK75992)

  - Sample applications shipped with IBM WebSphere     Application Server are affected by cross-site scripting     vulnerabilities. (PK76720)

  - The administrative console is affected by a cross-site     scripting vulnerability. (PK77505)

  - It may be possible for an attacker to read arbitrary     application-specific war files. (PK81387)

Fix Pack 23 より前の IBM WebSphere Application Server 6.1 がリモートホストにインストールされているようです。このようなバージョンは、報告されているところによれば、以下の複数の脆弱性の影響を受けます。

  - 攻撃者に有効な認証情報がある場合、認証されたセッションをハイジャックできる可能性があります。（PK66676）

  - リモート攻撃者が、ibm_security_logoutサーブレットを使用して、ユーザーを任意のサイトにリダイレクトする可能性があります。（PK71126）

  - 一定の条件下で、管理コンソールのユーザーセッションにアクセスできることがあります。（PK74966）

  - APAR PK41002 が適用されている場合、JAX-RPC WS-Securityコンポーネントの脆弱性により、「UsernameToken」が不適切に検証されることがあります。（PK75992）

  - IBM WebSphere Application Serverに付属しているサンプルアプリケーションは、クロスサイトスクリプティング脆弱性の影響を受けます。（PK76720）

  - 管理コンソールはクロスサイトスクリプティング脆弱性の影響を受けます。（PK77505）

  - 攻撃者が、任意のアプリケーション固有のwarファイルを読み取れる可能性があります。（PK81387）

遠端主機上安裝的似乎是 Fix Pack 23 之前的 IBM WebSphere Application Server 6.1。報告指出這些版本受到多個弱點的影響：

  - 若攻擊者具有有效憑證，就可能會劫持經驗證的工作階段。(PK66676)

  - 遠端攻擊者或可使用 ibm_security_logout servlet 將使用者重新導向至任意網站。(PK71126)

  - 在特定條件下，攻擊者可存取管理主控台使用者工作階段。(PK74966)

  - 若已套用 APAR PK41002，JAX-RPC WS-Security 元件中有一個弱點會錯誤驗證「UsernameToken」。(PK75992)

  - IBM WebSphere Application Server 隨附的範例應用程式受到跨網站指令碼弱點影響。(PK76720)

  - 管理主控台受到跨網站指令碼弱點影響。(PK77505)

  - 攻擊者可讀取特定於應用程式的任意 WAR 檔案。(PK81387)

远程主机上安装的似乎是 Fix Pack 23 之前的 IBM WebSphere Application Server 6.1。有报告称此类版本受到多种漏洞的影响：

  - 如果攻击者具有有效凭据，可能会劫持经身份验证的会话。(PK66676)

  - 远程攻击者可能使用 ibm_security_logout servlet 将用户重定向到任意站点。(PK71126)

  - 在某些情况下，可以访问管理控制台用户会话。(PK74966)

  - 如果应用了 APAR PK41002，则 JAX-RPC WS-Security 组件中的一个漏洞会错误地验证“UsernameToken”。(PK75992)

  - IBM WebSphere Application Server 随附的示例应用程序受到跨站脚本漏洞的影响。(PK76720)

  - 管理控制台受到一个跨站脚本漏洞的影响。(PK77505)

  - 攻击者可能会读取任意特定于应用程序的 war 文件。(PK81387)

 IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host.  Such versions reportedly have an as-yet unspecified security exposure when the 'FileServing' feature in the Servlet Engine / Web Container component is enabled.  (PK64302).

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host.  Such versions are reportedly affected by the following vulnerabilities :

  - By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash the remote application server (PK69371).
 - An unspecified security exposure vulnerability exists if the 'fileServing' feature is enabled (PK64302).
 - Web services security fails to honor Certificate Revocation Lists (CRL) configured in Certificate Store Collections (PK61258).

IBM WebSphere Application Server 6.1 before Fix Pack 23 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities :

  - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. (PK66676)

  - It may be possible for a remote attacker to redirect users to arbitrary sites using ibm_security_logout servlet. (PK71126) 

  - Under certain conditions it may be possible to access administrative console user sessions. (PK74966)

  - If APAR PK41002 has been applied, an unspecified vulnerability in JAX-RPC WS-Security component could incorrectly validate 'UsernameToken'. (PK75992)

  - Sample applications shipped with IBM WebSphere Application Server are affected by cross-site scripting vulnerabilities. (PK76720)

  - The adminitrative console is affected by a cross-site scripting vulnerability. (PK77505)

  - It may be possible for an attacker to read arbitrary application-specific war files. (PK81387)

  - A session highjacking vulnerability exists in the 'forced logout' feature. (PK74966)

IBM WebSphere Application Server 7.0 before Fix Pack 1 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities.

  - A vulnerability in feature pack for web services could lead to information disclosure due to 'userNameToken' (PK67282).

  - A user locked by the underlying OS may be able to authenticate via the administrative console (PK67909).

  - Web authentication options 'Authenticate when any URI is accessed' and 'Use available authentication data when an unprotected URI is accessed' are ignored. Servlets with no security constraints are not authenticated and usernames with the '@' symbol fail to authenticate  (PK71826).

  - WS-Security in JAX-WS does not remove UsernameTokens from client cache on failed logins (PK72435).

  - SSL traffic is routed over unencrypted TCP routes (PK74777). 

IBM WebSphere Application Server 6.1 before Fix Pack 21 appears to be running on the remote host.  Such versions are reportedly affected by multiple flaws :

  - Provided Performance Monitoring Infrastructure (PMI) is
    enabled. It may be possible for a local attacker to
    obtain sensitive information through 'Systemout.log' and
    'ffdc' files which are written by PerfServlet.
  - SSL Configuration settings attribute 'Security Level' 
    does not correctly enforce the level of encryption used
    by the application server. (PK63182) 

ID	名稱	產品	系列	已發布	已更新	嚴重性
36161	IBM WebSphere Application Server < 6.1.0.23 Multiple Flaws	Nessus	Web Servers	2009/4/15	2018/8/6	high
36161	IBM WebSphere Application Server < 6.1.0.23の複数の欠陥	Nessus	Web Servers	2009/4/15	2018/8/6	high
36161	IBM WebSphere Application Server < 6.1.0.23 多個缺陷	Nessus	Web Servers	2009/4/15	2018/8/6	high
36161	IBM WebSphere Application Server < 6.1.0.23 多个缺陷	Nessus	Web Servers	2009/4/15	2018/8/6	high
4685	IBM WebSphere Application Server 6.1 < Fix Pack 19 Unspecified Vulnerability	Nessus Network Monitor	Web Servers	2008/9/17	2019/3/6	medium
4725	IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2008/10/27	2019/3/6	medium
4996	IBM WebSphere Application Server < 6.1.0.23 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2009/4/17	2019/3/6	high
4783	IBM WebSphere Application Server 7.0 < Fix Pack 1 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2008/12/10	2019/3/6	medium
4929	IBM WebSphere Application Server 6.1 < Fix Pack 21 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2009/2/12	2019/3/6	medium

偵測

搜尋 Plugin

high

high

high

high

medium

medium

high

medium

medium