6.8

CVE-2013-0543

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IbmWebsphere Application Server Version6.1.0.0
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.1
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.2
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.3
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.5
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.7
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.9
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.11
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.12
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.13
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.14
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.15
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.17
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.19
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.21
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.23
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.25
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.27
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.29
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.31
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.33
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.35
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.37
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.39
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.41
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.43
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version6.1.0.45
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.1
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.2
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.3
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.4
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.5
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.6
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.7
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.8
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.9
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.11
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.13
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.15
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.17
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.19
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.21
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.23
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.25
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version7.0.0.27
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.0
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.1
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.2
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.3
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.4
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.0.0.5
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.5.0.0
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
IbmWebsphere Application Server Version8.5.0.1
   HpHp-ux Version-
   LinuxLinux Kernel Version-
   SunSunos Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.53% 0.829
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

http://www-01.ibm.com/support/docview.wss?&uid=swg21632423
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM75582
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/82759
Vendor Advisory
VDB Entry