NVD

Id
48465  
Name
CVE-2009-1172  
Description
The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has unknown impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2014-10-24  
Seq
2009-1172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244051 48465 CVE-2009-1172 http://www-01.ibm.com/support/docview.wss?uid=swg21367223  View
244052 48465 CVE-2009-1172 http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
244053 48465 CVE-2009-1172 http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View
244054 48465 CVE-2009-1172 34502  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40171 JVNDB-2009-001177 IBM WebSphere Application Server (WAS) における UsernameToken オブジェクトに関連する脆弱性 IBM WebSphere Application Server (WAS) の Web Services Security コンポーネントに含まれる JAX-RPC WS-Security runtime には、APAR PK41002 がインストールされている場合、UsernameToken オブジェクトに関連する脆弱性が存在します。 CVE-2009-1172 38603 CVE-2009-1172 48465 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001177.html 2009-03-31 2009-04-27 View