NVD

Id
47838  
Name
CVE-2009-0506  
Description
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-02-25  
Modified Date
2009-07-22  
Seq
2009-0506  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239620 47838 CVE-2009-0506 http://www-01.ibm.com/support/docview.wss?uid=swg27006876  View
239621 47838 CVE-2009-0506 33884  View
239622 47838 CVE-2009-0506 websphere-zos-csiv2-unspecified(48886)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43462 JVNDB-2009-004469 z/OS 用の IBM WAS における脆弱性 z/OS 用の IBM WebSphere Application Server (WAS) は、CSIv2 Identity Assertion が有効になっている、および Enterprise JavaBeans (EJB) 通信が WAS 6.1 インスタンスと WAS pre-6.1 インスタント間に発生している際、(1) 間違った件名、および (2) 複数の CBIND チェックに関する不備があるため、不特定の影響を受ける脆弱性が存在します。 CVE-2009-0506 37937 CVE-2009-0506 47838 6.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004469.html 2009-02-25 2012-09-25 View