VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
JVNDB-2010-001672     ( CVE-2010-2326 | CVE-2010-2326 )
IBM WebSphere Application Server における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001672.html

Original

IBM WebSphere Application Server には、ノードを結合する際の addNode -trace の使用に不備があるため、CIMMetadataCollectorImpl の重要なトレース情報が addNode.log ファイルに読まれる脆弱性が存在します。

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
JVN iPedia
First Published:
2010-07-13
Source Information Category:
Advisory, Alert
Last Updated:
2010-07-13




Affected Product Tags
cpe:/a:ibm:websphere_application_server
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
X Medium [?]
Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

Alternatives
Common Vulnerabilities and Exposures (CVE) CVE-2010-2326




National Vulnerability Database (NVD) CVE-2010-2326








References
IBM Support Document 7014463




IBM Support Document PM10684




IBM Support Document PM15830




OPEN SOURCE VULNERABILITY DATABASE (OSVDB) 65438




Secunia Advisory SA40096




SecurityFocus 40699




VUPEN Security VUPEN/ADV-2010-1411




共通脆弱性タイプ一覧 (CWE) 情報漏えい (CWE-200)





Copyright © 2010 JPCERT/CC All Rights Reserved.