PT-2016-1321
CVE-2015-7455
·
تاريخ النشر
2016-02-29
·
تاريخ التحديث
2016-03-02
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Portal versions 7.x through 7.0.0.2 CF29
IBM WebSphere Portal versions 8.0.x before 8.0.0.1 CF20
IBM WebSphere Portal versions 8.5.x before 8.5.0.0 CF09
Description
The issue is related to insufficient access control in the user interface of the IBM WebSphere Portal server application. This can be exploited by a remote attacker to modify content items using the user interface.
Recommendations
For versions 7.x through 7.0.0.2 CF29, update to a version after 7.0.0.2 CF29 to resolve the issue.
For versions 8.0.x before 8.0.0.1 CF20, update to a version after 8.0.0.1 CF20 to resolve the issue.
For versions 8.5.x before 8.5.0.0 CF09, update to a version after 8.5.0.0 CF09 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾