Vulnerabilities > CVE-2009-1174 - Cryptographic Issues vulnerability in IBM Websphere Application Server 7.0/7.0.0.1

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
ibm
CWE-310
critical
nessus
NVD
Published: 2009-03-31
Updated: 2016-09-07

Summary

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Vulnerable Configurations

Part Description Count
Application
Ibm
2

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Nessus

  • NASL familyWeb Servers
    NASL idWEBSPHERE_6_1_0_25.NASL
    descriptionIBM WebSphere Application Server 6.1 before Fix Pack 25 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Non-standard HTTP methods are allowed. (PK73246) - An error in Single Sign-on (SSO) with SPNEGO implementation could allow a remote attacker to bypass security restrictions. (PK77465) -
    last seen2020-06-01
    modified2020-06-02
    plugin id39450
    published2009-06-19
    reporterThis script is Copyright (C) 2009-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/39450
    titleIBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
  • NASL familyWeb Servers
    NASL idWEBSPHERE_7_0_0_3.NASL
    descriptionIBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Under certain conditions it may be possible to access administrative console user sessions. (PK74966) - The administrative console is affected by a cross-site scripting vulnerability. (PK77505) - If APAR PK41002 has been applied, a vulnerability in the JAX-RPC WS-Security component could incorrectly validate
    last seen2020-06-01
    modified2020-06-02
    plugin id36133
    published2009-04-10
    reporterThis script is Copyright (C) 2009-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/36133
    titleIBM WebSphere Application Server 7.0 < Fix Pack 3

References