CVE-2006-2342 — IBM Websphere Application Server vulnerability

3 documents3 sources

Severity

7.5HIGHNVD

EPSS

1.2%

top 20.67%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedMay 12

Latest updateMay 1

Description

IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/websphere_application_server6.0.2

Patches

Patch: secunia.com ↗Patch: www-1.ibm.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

GHSA

GHSA-j743-2x5f-jqw4: IBM WebSphere Application Server 6↗2022-05-01

▶

CVEList

CVE-2006-2342: IBM WebSphere Application Server 6↗2006-05-12

▶