CVE-2006-2432 — IBM Websphere Application Server vulnerability

3 documents3 sources

Severity

7.5HIGHNVD

EPSS

1.5%

top 18.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedMay 17

Latest updateMay 1

Description

IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/websphere_application_server5 versions+4

Patches

Patch: archives.neohapsis.com ↗Patch: secunia.com ↗Patch: www-1.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-c5f2-m637-877p: IBM WebSphere Application Server 5↗2022-05-01

▶

CVEList

CVE-2006-2432: IBM WebSphere Application Server 5↗2006-05-17

▶