The IBM WebSphere Application Server running on the remote host is version 7.0 prior to 7.0.0.39, 8.0 prior to 8.0.0.11, or 8.5 prior to 8.5.5.6. It is, therefore, potentially affected by multiple vulnerabilities :

  - A security feature bypass vulnerability, known as FREAK     (Factoring attack on RSA-EXPORT Keys), exists in the IBM     Global Security Kit (GSKit) due to the support of weak     EXPORT_RSA cipher suites with keys less than or equal to     512 bits. A man-in-the-middle attacker may be able to     downgrade the SSL/TLS connection to use EXPORT_RSA     cipher suites which can be factored in a short amount of     time, allowing the attacker to intercept and decrypt the     traffic. (CVE-2015-0138)

  - An information disclosure vulnerability exists due to a     flaw in the Bleichenbacher countermeasure implementation     in Apache WSS4J. A remote attacker can exploit this, via     a crafted message, to determine where an encryption     failure to place, allowing the attacker to gain access     to the plaintext symmetric key. (CVE-2015-0226)

  - An XML External Entity (XXE) vulnerability exists due to     an incorrectly configured XML parser that accepts XML     external entities from an untrusted source. A remote     attacker can exploit this, via specially crafted XML     data, to gain access to arbitrary files. (CVE-2015-0250)

  - A privilege escalation vulnerability exists due to a     flaw that occurs in 'full' profile and 'liberty' profile     when using an OAuth grant password. A remote attacker     can exploit this to gain elevated privileges.
    (CVE-2015-1885)

  - A privilege escalation vulnerability exists due to     incorrect settings in the serveServletsbyClassname     functionality. A remote attacker can exploit this to     gain elevated privileges. (CVE-2015-1927)

  - An information disclosure vulnerability exists that     allows an unauthenticated, remote attacker to identify     the proxy server software by reading the HTTP 'Via'     header. (CVE-2015-1932)

  - An unspecified flaw exists in the administrative console     that allows a remote attacker, via the 'JSESSIONID'     parameter, to hijack a user's session. (CVE-2015-1936)

  - A privilege escalation vulnerability exists due to an     unspecified flaw that occurs when handling user roles.
    A local attacker can exploit this to gain elevated     privileges. (CVE-2015-1946)   
  - A security feature bypass vulnerability exists, known as     Bar Mitzvah, due to improper combination of state data     with key data by the RC4 cipher algorithm during the     initialization phase. A man-in-the-middle attacker can     exploit this, via a brute-force attack using LSB values,     to decrypt the traffic. (CVE-2015-2808)

  - An unspecified flaw exists that allows an     unauthenticated, remote attacker to spoof servlets or     disclose sensitive information. (CVE-2015-4938)

リモートホストで実行中の IBM WebSphere Application Server のバージョンは、7.0.0.39 より前の 7.0、8.0.0.11 より前の 8.0、または 8.5.5.6 より前の 8.5 です。このため、複数の脆弱性の影響を受ける可能性があります：

- FREAK（RSA-EXPORT キーに対するファクター攻撃）と呼ばれるセキュリティ機能のバイパスの脆弱性が IBM Global Security Kit（GSKit）に存在します。これは、512 ビッド以下のキーで弱い EXPORT_RSA 暗号化パッケージがサポートされているため、存在します。中間者攻撃により、EXPORT_RSA 暗号化パッケージを使用するように SSL/TLS 接続をダウングレードすることができ、これは短時間でファクタリング可能であり、攻撃者がトラフィックを傍受したり復号したりするおそれがあります。(CVE-2015-0138)

- Apache WSS4J の Bleichenbacher 対策の実装の欠陥により、情報漏洩の脆弱性が存在します。リモートの攻撃者がこれを悪用し、細工されたメッセージを介して暗号化失敗の位置を見つけ、平文の対称鍵へのアクセス権を取得する可能性があります。(CVE-2015-0226)

- XML 外部エンティティ（XXE）の脆弱性が存在します。これは、XML パーサーが不適切に構成され、XML 外部エンティティが信頼できないソースから受け入れられているため発生しています。リモートの攻撃者がこれを悪用し、特別に細工された XML データを介して、任意のファイルへアクセス権を取得する可能性があります。(CVE-2015-0250)

- Oauth 許可パスワードを使用する際に「full」プロファイルおよび「liberty」プロファイルで発生する欠陥のために、権限昇格の脆弱性が存在します。リモートの攻撃者がこれを悪用して、昇格された特権を取得する可能性があります。
 (CVE-2015-1885)

- serveServletsbyClassname　の機能の誤った設定により、権限昇格の脆弱性が存在します。リモートの攻撃者がこれを悪用して、昇格された特権を取得する可能性があります。(CVE-2015-1927)

- 認証されていないリモートの攻撃者が、HTTP「Via」ヘッダーを読み取ることによってプロキシサーバーソフトウェアを特定することを可能にする、情報漏洩の脆弱性が存在します。(CVE-2015-1932)

- 詳細不明の欠陥が管理コンソールに存在し、これによりリモートの攻撃者が「JSESSIONID」パラメーターを介してユーザーのセッションをハイジャックする可能性があります。(CVE-2015-1936)

- ユーザーロールの処理の際に発生する詳細不明の欠陥により、権限昇格の脆弱性が存在します。
 ローカルの攻撃者がこれを悪用して、昇格された権限を取得する可能性があります。（CVE-2015-1946）
 - 初期化フェーズの RC4 暗号化アルゴリズムによるキーデータと状態データの不適切な組み合わせにより、Bar Mitzvah として知られるセキュリティ機能バイパスの脆弱性が存在しています。中間者攻撃を行う攻撃者はこれを悪用して、LSB 値を用いたブルートフォース攻撃によりトラフィックを復号化できます。(CVE-2015-2808)

- 認証されていないリモートの攻撃者が、サーブレットを偽装したり、機密情報を漏洩させることを可能にする、詳細不明の欠陥が存在します。(CVE-2015-4938)

远程主机上运行的 IBM WebSphere Application Server 是低于 7.0.0.39 的 7.0、低于 8.0.0.11 的 8.0 或低于 8.5.5.6 的 8.5。因此，它可能受到多种漏洞的影响：

- 由于支持密钥小于或等于 512 位的弱 EXPORT_RSA 加密套件，因此 IBM Global Security Kit (GSKit) 中存在安全功能绕过漏洞（称为 FREAK，可对 RSA 出口级密钥进行分解攻击）。中间人攻击者可将 SSL/TLS 连接降级为使用能够在短时间内分解的 EXPORT_RSA 加密套件，从而允许攻击者拦截和解密流量。(CVE-2015-0138)

- 由于 Apache WSS4J 中的 Bleichenbacher 反制措施实现，存在信息泄露漏洞。远程攻击者可利用此漏洞，通过构建的消息确定未加密的位置，从而获取明文对称密钥的访问权限。(CVE-2015-0226)

- 由于未正确配置的 XML 解析器接受来自非信任源的 XML 外部实体，因此存在 XML 外部实体 (XXE) 漏洞。远程攻击者可利用此漏洞，通过特别构建的 XML 数据获取任意文件的访问权限。(CVE-2015-0250)

- 由于在使用 OAuth 授予密码时“full”配置文件和“liberty”配置文件中发生缺陷，因此存在权限升级漏洞。远程攻击者可利用此问题获得提升的权限。
 (CVE-2015-1885)

- 由于 serveServletsbyClassname 功能中不正确的设置，因此存在权限升级漏洞。远程攻击者可利用此问题获得提升的权限。(CVE-2015-1927)

- 存在信息泄露漏洞，未经认证的远程攻击者可利用此漏洞，通过标头读取 HTTP，进而识别代理服务器软件。(CVE-2015-1932)

- 管理控制台中存在不明的缺陷，可允许远程攻击者通过“JSESSIONID”参数劫持用户会话。(CVE-2015-1936)

- 由于处理用户角色时发生不明的缺陷，因此存在权限升级漏洞。
 本地攻击者可利用此问题获得提升的权限。(CVE-2015-1946) 
 - 由于在初始化阶段中状态数据与使用 RC4 加密算法的密钥数据组合不当，因此存在安全功能绕过漏洞，也称 Bar Mitzvah。中间人攻击者能够利用此漏洞，使用 LSB 值发动暴力破解，以解密流量。(CVE-2015-2808)

- 存在不明缺陷，未经认证的远程攻击者可利用此缺陷假冒 servlet 或泄露敏感信息。(CVE-2015-4938)

遠端主機上執行的 IBM WebSphere Application Server 為比 7.0.0.39 版舊的 7.0 版、比 8.0.0.11 版舊的 8.0 版，或比 8.5.5.6 版舊的 8.5 版。因此可能受到多個弱點影響：

- 在 IBM Global Security Kit (GSKit) 中存在一個稱為 FREAK (RSA-EXPORT 金鑰的分解攻擊) 的安全性功能繞過弱點，這是因為支援具有小於或等於 512 位元金鑰的弱式 EXPORT_RSA 加密套件所致。攔截式攻擊者可降級 SSL/TLS 連線以使用 EXPORT_RSA 加密套件，該套件可在短時間內遭到分解，進而允許攻擊者攔截和解密流量。(CVE-2015-0138)

- 存在一個資訊洩漏弱點，這是因為在 Apache WSS4J 中 Bleichenbacher 對策實作的瑕疵所致。遠端攻擊者可加以惡意利用，透過特製的訊息，判定要放置加密失敗的位置，進而允許攻擊者取得純文字對稱金鑰的存取權。(CVE-2015-0226)

- 存在一個 XML 外部實體 (XXE) 弱點，這是因為不正確地設定接受來自未受信任來源之 XML 外部實體的 XML 剖析器所致。遠端攻擊者可加以惡意利用，透過特製的 XML 資料，取得任意檔案的存取權。(CVE-2015-0250)

- 存在一個權限提升弱點，這是因為在使用 Oauth 授予密碼時，在 ‘full’ 設定檔和 ‘liberty’ 設定檔中發生的瑕疵所致。遠端攻擊者可惡意利用此弱點取得較高的權限。
 (CVE-2015-1885)

- 存在一個權限提升弱點，這是因為 serveServletsbyClassname 功能中不正確的設定所致。遠端攻擊者可惡意利用此弱點取得較高的權限。(CVE-2015-1927)

- 存在一個資訊洩漏弱點，可允許未經驗證的遠端攻擊者透過讀取 HTTP「Via」標頭而識別 Proxy 伺服器軟體。(CVE-2015-1932)

- 在管理主控台中存在一個不明瑕疵，會允許遠端攻擊者透過 ‘JSESSIONID’ 參數，劫持使用者的工作階段。(CVE-2015-1936)

- 存在一個權限提升弱點，這是因為處理使用者角色時所發生的不明瑕疵所致。
 本機攻擊者可利用此弱點取得較高的權限。(CVE-2015-1946) 
- 存在一個稱為 Bar Mitzvah 的安全性功能繞過弱點，這是因為 RC4 加密演算法在初始化階段不當結合狀態資料和金鑰資料所致。攔截式攻擊者可惡意利用這點，透過使用 LSB 值的暴力密碼破解攻擊，將流量解密。(CVE-2015-2808)

- 存在一個不明瑕疵，可允許未經驗證的遠端攻擊者偽造 servlet 或洩漏敏感資訊。(CVE-2015-4938)

The remote host appears to be running IBM WebSphere Application Server 8.5 prior to 8.5.5.6.  Such versions are potentially affected by multiple issues :

 - A flaw exists that is triggered as deployment descriptor security constraints are combined with ServletSecurity annotations on a servlet. This may allow a remote attacker to gain elevated privileges. (CVE-2014-8890)
 - A security feature bypass vulnerability, known as FREAK (Factoring attack on RSA-EXPORT Keys), exists in the IBM Global Security Kit (GSKit) due to the support of weak EXPORT_RSA cipher suites with keys less than or equal to 512 bits.  A man-in-the-middle (MitM) attacker may be able to downgrade the SSL/TLS connection to use EXPORT_RSA cipher suites which can be factored in a short amount of time, allowing the attacker to intercept and decrypt the traffic. (CVE-2015-0138)
 - An information disclosure vulnerability exists due to a flaw in the Bleichenbacher countermeasure implementation in Apache WSS4J.  A remote attacker can exploit this, via a crafted message, to determine where an encryption failure took place, allowing the attacker to gain access to the plaintext symmetric key. (CVE-2015-0226)
 - An XML External Entity (XXE) vulnerability exists due to an incorrectly configured XML parser that accepts XML external entities from an untrusted source.  A remote attacker can exploit this, via specially crafted XML data, to gain access to arbitrary files. (CVE-2015-0250)
 - A privilege escalation vulnerability exists due to a flaw that occurs in 'full' profile and 'liberty' profile when using an OAuth grant password.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1885)
 - A privilege escalation vulnerability exists due to incorrect settings in the 'serveServletsbyClassname' functionality.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1927)
 - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to identify the proxy server software by reading the HTTP 'Via' header. (CVE-2015-1932)
 - An unspecified flaw exists in the administrative console that allows a remote attacker, via the 'JSESSIONID' parameter, to hijack a user's session. (CVE-2015-1936)
 - A privilege escalation vulnerability exists due to an unspecified flaw that occurs when handling user roles.  A local attacker can exploit this to gain elevated privileges. (CVE-2015-1946)
 - A security feature bypass vulnerability exists, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase.  A MitM attacker can exploit this, via a brute-force attack using LSB values, to decrypt the traffic. (CVE-2015-2808)
 - An unspecified flaw exists that allows an unauthenticated, remote attacker to spoof servlets or disclose sensitive information. (CVE-2015-4938)

The remote host appears to be running IBM WebSphere Application Server 7.0 prior to 7.0.0.39. Such versions are potentially affected by multiple issues :

 - A flaw exists that is triggered as deployment descriptor security constraints are combined with 'ServletSecurity' annotations on a servlet. This may allow a remote attacker to gain elevated privileges. (CVE-2014-8890)
 - A security feature bypass vulnerability, known as FREAK (Factoring attack on RSA-EXPORT Keys), exists in the IBM Global Security Kit (GSKit) due to the support of weak EXPORT_RSA cipher suites with keys less than or equal to 512 bits.  A man-in-the-middle (MitM) attacker may be able to downgrade the SSL/TLS connection to use EXPORT_RSA cipher suites which can be factored in a short amount of time, allowing the attacker to intercept and decrypt the traffic. (CVE-2015-0138)
 - An information disclosure vulnerability exists due to a flaw in the Bleichenbacher countermeasure implementation in Apache WSS4J.  A remote attacker can exploit this, via a crafted message, to determine where an encryption failure took place, allowing the attacker to gain access to the plaintext symmetric key. (CVE-2015-0226)
 - An XML External Entity (XXE) vulnerability exists due to an incorrectly configured XML parser that accepts XML external entities from an untrusted source.  A remote attacker can exploit this, via specially crafted XML data, to gain access to arbitrary files. (CVE-2015-0250)
 - A privilege escalation vulnerability exists due to a flaw that occurs in 'full' profile and 'liberty' profile when using an OAuth grant password.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1885)
 - A privilege escalation vulnerability exists due to incorrect settings in the 'serveServletsbyClassname' functionality.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1927)
 - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to identify the proxy server software by reading the HTTP 'Via' header. (CVE-2015-1932)
 - An unspecified flaw exists in the administrative console that allows a remote attacker, via the 'JSESSIONID' parameter, to hijack a user's session. (CVE-2015-1936)
 - A privilege escalation vulnerability exists due to an unspecified flaw that occurs when handling user roles.  A local attacker can exploit this to gain elevated privileges. (CVE-2015-1946)
 - A flaw exists that is triggered as CRLF (Carriage Return and Line Feed) character sequences are not properly sanitized before being included in HTTP responses.  This allows a remote attacker to inject additional headers into responses to conduct HTTP response splitting attacks. (CVE-2015-2017)
 - A security feature bypass vulnerability exists, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase.  A MitM attacker can exploit this, via a brute-force attack using LSB values, to decrypt the traffic. (CVE-2015-2808)
 - An unspecified flaw exists that allows an unauthenticated, remote attacker to spoof servlets or disclose sensitive information. (CVE-2015-4938)
 - An unspecified exists flaw in the 'Management' port. This may allow a remote attacker to execute arbitrary code. No further details have been provided by the vendor. (CVE-2015-1920)

The remote host appears to be running IBM WebSphere Application Server 8.0 prior to 8.0.0.11.  Such versions are potentially affected by multiple issues :

 - A flaw exists that is triggered as deployment descriptor security constraints are combined with ServletSecurity annotations on a servlet. This may allow a remote attacker to gain elevated privileges. (CVE-2014-8890)
 - A security feature bypass vulnerability, known as FREAK (Factoring attack on RSA-EXPORT Keys), exists in the IBM Global Security Kit (GSKit) due to the support of weak EXPORT_RSA cipher suites with keys less than or equal to 512 bits.  A man-in-the-middle (MitM) attacker may be able to downgrade the SSL/TLS connection to use EXPORT_RSA cipher suites which can be factored in a short amount of time, allowing the attacker to intercept and decrypt the traffic. (CVE-2015-0138)
 - An information disclosure vulnerability exists due to a flaw in the Bleichenbacher countermeasure implementation in Apache WSS4J.  A remote attacker can exploit this, via a crafted message, to determine where an encryption failure took place, allowing the attacker to gain access to the plaintext symmetric key. (CVE-2015-0226)
 - An XML External Entity (XXE) vulnerability exists due to an incorrectly configured XML parser that accepts XML external entities from an untrusted source.  A remote attacker can exploit this, via specially crafted XML data, to gain access to arbitrary files. (CVE-2015-0250)
 - A privilege escalation vulnerability exists due to a flaw that occurs in 'full' profile and 'liberty' profile when using an OAuth grant password.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1885)
 - A privilege escalation vulnerability exists due to incorrect settings in the 'serveServletsbyClassname' functionality.  A remote attacker can exploit this to gain elevated privileges. (CVE-2015-1927)
 - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to identify the proxy server software by reading the HTTP 'Via' header. (CVE-2015-1932)
 - An unspecified flaw exists in the administrative console that allows a remote attacker, via the 'JSESSIONID' parameter, to hijack a user's session. (CVE-2015-1936)
 - A privilege escalation vulnerability exists due to an unspecified flaw that occurs when handling user roles.  A local attacker can exploit this to gain elevated privileges. (CVE-2015-1946)
 - A security feature bypass vulnerability exists, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase.  A MitM attacker can exploit this, via a brute-force attack using LSB values, to decrypt the traffic. (CVE-2015-2808)
 - An unspecified flaw exists that allows an unauthenticated, remote attacker to spoof servlets or disclose sensitive information. (CVE-2015-4938)

ID	名稱	產品	系列	已發布	已更新	嚴重性
84639	IBM WebSphere Application Server 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.11 (FP11) / 8.5 < 8.5.5.6 (FP6) Multiple Vulnerabilities (Bar Mitzvah) (FREAK)	Nessus	Web Servers	2015/7/9	2018/8/6	high
84639	IBM WebSphere Application Server 7.0 < 7.0.0.39（FP39）/ 8.0 < 8.0.0.11（FP11）/ 8.5 < 8.5.5.6（FP6）複数の脆弱性（Bar Mitzvah）（FREAK）	Nessus	Web Servers	2015/7/9	2018/8/6	high
84639	IBM WebSphere Application Server 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.11 (FP11) / 8.5 < 8.5.5.6 (FP6) 多种漏洞 (Bar Mitzvah) (FREAK)	Nessus	Web Servers	2015/7/9	2018/8/6	high
84639	IBM WebSphere Application Server 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.11 (FP11) / 8.5 < 8.5.5.6 (FP6) 多個弱點 (Bar Mitzvah) (FREAK)	Nessus	Web Servers	2015/7/9	2018/8/6	high
9716	IBM WebSphere Application Server 8.5 < 8.5.5.6 Multiple Vulnerabilities (FREAK)	Nessus Network Monitor	Web Servers	2016/10/26	2019/3/6	high
9700	IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)	Nessus Network Monitor	Web Servers	2016/10/26	2019/3/6	high
9713	IBM WebSphere Application Server 8.0 < 8.0.0.11 Multiple Vulnerabilities (FREAK)	Nessus Network Monitor	Web Servers	2016/10/26	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high