Vulnerability Name:

CVE-2007-1945 (CCN-33471)

Assigned:2007-04-06
Published:2007-04-06
Updated:2017-07-29
Summary:Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 has unknown impact and attack vectors.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2007-1945

Source: OSVDB
Type: UNKNOWN
41605

Source: CCN
Type: SA24852
IBM WebSphere Application Server Unspecified Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
24852

Source: CCN
Type: IBM Support Web site
Fix Pack 7 (6.1.0.7)

Source: CONFIRM
Type: Patch
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951#6107

Source: AIXAPAR
Type: Patch
PK36447

Source: CCN
Type: OSVDB ID: 41605
IBM WebSphere Application Server (WAS) Servlet Engine/Web Container Unspecified Issue

Source: VUPEN
Type: UNKNOWN
ADV-2007-1282

Source: XF
Type: UNKNOWN
websphere-servlet-information-disclosure(33471)

Source: XF
Type: UNKNOWN
websphere-servlet-information-disclosure(33471)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:ibm:aix:*:*:*:*:*:*:*:*
  • OR cpe:/o:ibm:i5os:*:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_xp:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*
  • AND
  • cpe:/a:ibm:websphere_application_server:*:*:*:*:*:*:*:* (Version <= 6.1.0.1)

    • Configuration CCN 1:
  • cpe:/a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    hp hp-ux *
    ibm aix *
    ibm i5os *
    linux linux kernel *
    microsoft windows 2000 *
    microsoft windows 2003 server *
    microsoft windows xp *
    sun solaris *
    ibm websphere application server *
    ibm websphere application server 6.1.0.1
    ibm websphere application server 6.1.0.2
    ibm websphere application server 6.1.0.3
    ibm websphere application server 6.1.0.5
    ibm websphere application server 6.1.0.6
    ibm websphere application server 6.1.0.0
    ibm websphere application server 6.1.0.4