2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2015-4963" ,
"sourceIdentifier" : "psirt@us.ibm.com" ,
"published" : "2015-11-08T22:59:12.233" ,
2024-11-23 01:05:45 +00:00
"lastModified" : "2024-11-21T02:32:06.797" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors."
} ,
{
"lang" : "es" ,
"value" : "IBM Security Access Manager for Web 7.x en versiones anteriores a 7.0.0.16 y 8.x en versiones anteriores a 8.0.1.3 no maneja correctamente las peticiones WebSEAL HTTPTransformation, lo que permite a atacantes remotos leer o escribir a archivos arbitrarios a trav\u00e9s de vectores no especificados."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
2024-11-23 01:05:45 +00:00
"baseScore" : 7.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 01:05:45 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-17"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4133E7B3-02B3-44C8-BBD7-234E06C3EC70"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0ACEB654-5337-4C34-907A-FD63DE420825"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BF73213F-5BBF-4C29-8E43-1D83347BA615"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "823EDC19-5D2B-4AE3-955B-E236EABA7619"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD31CD02-A79B-4BF3-8D61-56924282D413"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "13157D89-B086-4FCA-B4A2-A75D7DB86225"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0BC24772-EA02-4E4E-8CC9-2F8572090DC0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "708CD9B7-0488-49D4-9CEE-06A4FC3BEF64"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6904A5F5-0844-49B3-A9DA-085CD9669891"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EA0D73EA-17FF-4410-B8AF-F09913C7B873"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0FB55332-6F59-4C14-B9AC-2A583047F11F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F165D2F0-120B-459A-9C2B-11D6C67DDB60"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C156FBDE-501A-49DD-BF04-188261BAF201"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6945F705-54EC-4A12-A9A3-BF0B78E81F9A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "17D95C29-60E2-47E9-B7FD-20AA803E548D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0.15:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6A1AA334-093F-41CC-94E5-B7C2E5396EEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6A4AD958-FDB2-4F63-AD4F-C88B33BFA692"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F807870-4976-43E1-89BE-F08DEEE109CD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B2B3E49D-08E6-44CF-B034-D155247B5DB9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E9F50A5E-111B-4CF6-A531-FE88E7735140"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D54372BE-6201-48AB-A720-F29E931E52B3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.22:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BCCE958E-6DFA-403E-B251-F5BA7825A546"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.31:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9DA2F71C-E15F-4729-A0D9-C8C116819546"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "39017599-E63F-4101-8D37-62D9B0CE6917"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AB037932-234B-41AD-8119-D964796ADDFD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8BA1DA71-91C8-4989-98B9-E924ED7B272A"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV71196" ,
"source" : "psirt@us.ibm.com"
} ,
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21964828" ,
"source" : "psirt@us.ibm.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securitytracker.com/id/1034103" ,
"source" : "psirt@us.ibm.com"
2024-11-23 01:05:45 +00:00
} ,
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV71196" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21964828" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securitytracker.com/id/1034103" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
