CVE

Id
29156  
CVE No.
CVE-2007-5799  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.  
Phase
Assigned (20071102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305864 29156 CVE-2007-5799 AIXAPAR:PK50245  View
305865 29156 CVE-2007-5799 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245  View
305866 29156 CVE-2007-5799 BID:26276  View
305867 29156 CVE-2007-5799 URL:http://www.securityfocus.com/bid/26276  View
305868 29156 CVE-2007-5799 OSVDB:41619  View
305869 29156 CVE-2007-5799 URL:http://osvdb.org/41619  View
305870 29156 CVE-2007-5799 SECTRACK:1018884  View
305871 29156 CVE-2007-5799 URL:http://www.securitytracker.com/id?1018884  View
305872 29156 CVE-2007-5799 SECUNIA:27448  View
305873 29156 CVE-2007-5799 URL:http://secunia.com/advisories/27448  View
305874 29156 CVE-2007-5799 XF:websphere-navigatetree-csrf(38179)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57599 JVNDB-2007-006291 WORK system e-commerce における脆弱性 WORK system e-commerce は、"Ajax ページ" に関する処理に不備があるため、不特定の影響を受ける脆弱性が存在します。 CVE-2007-5801 29156 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006291.html  View