Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to security concerns with monitor role users. NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_application_server | Ibm | * | 6.0.2.24 (including) |
| Websphere_application_server | Ibm | 6.1 (including) | 6.1 (including) |
| Websphere_application_server | Ibm | 6.1.0.1 (including) | 6.1.0.1 (including) |
| Websphere_application_server | Ibm | 6.1.0.2 (including) | 6.1.0.2 (including) |
| Websphere_application_server | Ibm | 6.1.0.3 (including) | 6.1.0.3 (including) |
| Websphere_application_server | Ibm | 6.1.0.5 (including) | 6.1.0.5 (including) |
| Websphere_application_server | Ibm | 6.1.0.7 (including) | 6.1.0.7 (including) |
| Websphere_application_server | Ibm | 6.1.0.9 (including) | 6.1.0.9 (including) |
| Websphere_application_server | Ibm | 6.1.0.11 (including) | 6.1.0.11 (including) |
References
- http://secunia.com/advisories/28588
- http://securitytracker.com/id?1019174
- http://www-1.ibm.com/support/docview.wss?rs=180\u0026uid=swg27007951
- http://www-1.ibm.com/support/docview.wss?uid=swg27006876
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=PK45768\u0026apar=only
- http://www.vupen.com/english/advisories/2007/3955
- http://www.vupen.com/english/advisories/2008/0241
- http://secunia.com/advisories/28588
- http://securitytracker.com/id?1019174
- http://www-1.ibm.com/support/docview.wss?rs=180\u0026uid=swg27007951
- http://www-1.ibm.com/support/docview.wss?uid=swg27006876
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=PK45768\u0026apar=only
- http://www.vupen.com/english/advisories/2007/3955
- http://www.vupen.com/english/advisories/2008/0241