CVE-2012-3306 in WebSphere Application Server
要約 (英語)
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
予約する
2012年06月07日
公開
2012年09月25日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 6547 | IBM WebSphere Application Server Multidomain Support 特権昇格 | 255 | 未実証 | 公式な修正 | CVE-2012-3306 |