7.5

CVE-2006-4136

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version <= 6.1.0.0
Ibm ≫ Websphere Application Server Version6.0.0.1
Ibm ≫ Websphere Application Server Version6.0.0.2
Ibm ≫ Websphere Application Server Version6.0.0.3
Ibm ≫ Websphere Application Server Version6.0.1.2
Ibm ≫ Websphere Application Server Version6.0.2.1
Ibm ≫ Websphere Application Server Version6.0.2.2
Ibm ≫ Websphere Application Server Version6.0.2.3
Ibm ≫ Websphere Application Server Version6.0.2.4
Ibm ≫ Websphere Application Server Version6.0.2.5
Ibm ≫ Websphere Application Server Version6.0.2.6
Ibm ≫ Websphere Application Server Version6.0.2.7
Ibm ≫ Websphere Application Server Version6.0.2.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.48% 0.705
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/21440
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only
Patch
http://www.securityfocus.com/bid/19463
Patch
http://www.vupen.com/english/advisories/2006/3262