Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only | patch vendor advisory |
http://www.vupen.com/english/advisories/2006/3262 | vdb entry |
http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only | patch vendor advisory |
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 | patch |
http://www.securityfocus.com/bid/19463 | vdb entry patch |
http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only | patch vendor advisory |
http://secunia.com/advisories/21440 | third party advisory patch vendor advisory |