CERTA-2008-AVI-226
Vulnerability from certfr_avis
Une vulnérabilité dans IBM Websphere Appication Server permet à un individu malveillant d'effectuer une élevation de privilèges.
Description
Une vulnérabilité due à une erreur non spécifée dans le module JAVA d'IBM WebSphere Application Server a été découverte. Celle-ci permet une élevation de privilèges via une appliquette spécialement conçue.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
IBM WebSphere Application Server 5.x.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eIBM WebSphere Application Server 5.x.\u003c/P\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 due \u00e0 une erreur non sp\u00e9cif\u00e9e dans le module JAVA\nd\u0027IBM WebSphere Application Server a \u00e9t\u00e9 d\u00e9couverte. Celle-ci permet une\n\u00e9levation de privil\u00e8ges via une appliquette sp\u00e9cialement con\u00e7ue.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2008-05-02T00:00:00",
"last_revision_date": "2008-05-02T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 IBM swg1PK65161 du 28 avril 2008 :",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161"
}
],
"reference": "CERTA-2008-AVI-226",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-05-02T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans \u003cspan class=\"textit\"\u003eIBM Websphere Appication\nServer\u003c/span\u003e permet \u00e0 un individu malveillant d\u0027effectuer une \u00e9levation\nde privil\u00e8ges.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans IBM WebSphere Application Server",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM PK65161 du 28 avril 2008",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…