CVE-2009-0506 — IBM Websphere Application Server vulnerability

3 documents3 sources

Severity

6.2MEDIUMNVD

EPSS

0.1%

top 84.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedFeb 25

Latest updateMay 2

Description

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks.

CVSS vector

AV:L/AC:H/C:C/I:C/A:CExploitability: 1.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/websphere_application_server13 versions+12

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-vrfj-4vq5-9448: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5↗2022-05-02

▶

CVEList

CVE-2009-0506: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5↗2009-02-25

▶