IBM WebSphere Application Server up to 6.0.2.17 Servlet information disclosure
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 4.6 | $0-$5k | 0.00 |
Summary
A vulnerability was found in IBM WebSphere Application Server up to 6.0.2.17. It has been classified as critical. This affects an unknown part of the component Servlet Handler. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2006-6636. There is no available exploit. To fix this issue, it is recommended to deploy a patch. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Details
A vulnerability classified as critical has been found in IBM WebSphere Application Server up to 6.0.2.17 (Application Server Software). This affects an unknown code block of the component Servlet Handler. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:
Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS) before 5.1.1.13 and 6.x before 6.0.2.17 has unknown impact and attack vectors.
The bug was discovered 12/14/2006. The weakness was presented 12/18/2006 with IBM (Website). It is possible to read the advisory at www-1.ibm.com. This vulnerability is uniquely identified as CVE-2006-6636 since 12/19/2006. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.
It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 45415 (IBM WebSphere Application Server 6.0 < 6.0.2.17 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Web Servers and running in the context r. The commercial vulnerability scanner Qualys is able to test this issue with plugin 87059 (IBM WebSphere Application Server Utility Classes Unspecified Vulnerability (PK29725)).
Applying a patch is able to eliminate this problem. The bugfix is ready for download at www-1.ibm.com. A possible mitigation has been published even before and not after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (30903), Tenable (45415), SecurityFocus (BID 21636†), OSVDB (40809†) and Secunia (SA23414†). See VDB-2764, VDB-2760, VDB-37964 and VDB-43310 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Product
Type
Vendor
Name
Version
- 6.0.2.0
- 6.0.2.1
- 6.0.2.2
- 6.0.2.3
- 6.0.2.4
- 6.0.2.5
- 6.0.2.6
- 6.0.2.7
- 6.0.2.8
- 6.0.2.9
- 6.0.2.10
- 6.0.2.11
- 6.0.2.12
- 6.0.2.13
- 6.0.2.14
- 6.0.2.15
- 6.0.2.16
- 6.0.2.17
License
Website
- Vendor: https://www.ibm.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Information disclosureCWE: CWE-200 / CWE-284 / CWE-266
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Nessus ID: 45415
Nessus Name: IBM WebSphere Application Server 6.0 < 6.0.2.17 Multiple Vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
0-Day Time: 🔍
Patch: www-1.ibm.com
Timeline
12/14/2006 🔍12/14/2006 🔍
12/15/2006 🔍
12/15/2006 🔍
12/17/2006 🔍
12/18/2006 🔍
12/18/2006 🔍
12/19/2006 🔍
12/19/2006 🔍
12/20/2006 🔍
04/05/2010 🔍
06/14/2025 🔍
Sources
Vendor: ibm.comAdvisory: www-1.ibm.com
Researcher: http://www.ibm.com
Organization: IBM
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2006-6636 (🔍)
GCVE (CVE): GCVE-0-2006-6636
GCVE (VulDB): GCVE-100-2763
X-Force: 30903 - IBM WebSphere Application Server Utility Classes unspecified, Medium Risk
SecurityFocus: 21636 - IBM WebSphere Application Server Multiple Remote Vulnerabilities
Secunia: 23414 - IBM WebSphere Application Server Multiple Vulnerabilities, Moderately Critical
OSVDB: 40809 - IBM WebSphere Application Server (WAS) Utility Classes Unspecified Security Issue
Vulnerability Center: 13346 - IBM WebSphere Application Server Unspecified Utility Classes Vulnerability, Critical
Vupen: ADV-2006-5050
See also: 🔍
Entry
Created: 12/20/2006 10:02 AMUpdated: 06/14/2025 11:03 PM
Changes: 12/20/2006 10:02 AM (90), 07/11/2019 06:10 PM (1), 06/14/2025 11:03 PM (18)
Complete: 🔍
Cache ID: 244:612:40
No comments yet. Languages: en.
Please log in to comment.