CVE

Id
60429  
CVE No.
CVE-2013-0482  
Status
Candidate  
Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a "Signature Wrap attack," a different vulnerability than CVE-2011-1377 and CVE-2013-0489.  
Phase
Assigned (20121216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
610053 60429 CVE-2013-0482 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21634646  View
610054 60429 CVE-2013-0482 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21635474  View
610055 60429 CVE-2013-0482 AIXAPAR:IC88185  View
610056 60429 CVE-2013-0482 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC88185  View
610057 60429 CVE-2013-0482 AIXAPAR:PM76582  View
610058 60429 CVE-2013-0482 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM76582  View
610059 60429 CVE-2013-0482 AIXAPAR:PM86026  View
610060 60429 CVE-2013-0482 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM86026  View
610061 60429 CVE-2013-0482 XF:was-wssecurity-spoofing(81548)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20453 JVNDB-2013-002028 IBM Domino の Java コンソールにおける一時的な資格をハイジャックされる脆弱性 IBM Domino の Java コンソールには、一時的な資格 (temporary credential) をハイジャックされる脆弱性が存在します。 CVE-2013-0487 60429 8.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002028.html  View