PT-2006-3396 · Ibm · Ibm Websphere Application Server

·

CVE-2006-2435

·

Publicado

2006-05-17

·

Atualizado

2011-03-08

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 5.0.2 and earlier IBM WebSphere Application Server versions 5.1.1 and earlier
Description The issue is related to inserting certain script tags in URLs, which may allow unintended execution of scripts.
Recommendations For IBM WebSphere Application Server versions 5.0.2 and earlier, update to a version later than 5.0.2 to resolve the issue. For IBM WebSphere Application Server versions 5.1.1 and earlier, update to a version later than 5.1.1 to resolve the issue. As a temporary workaround, consider restricting the insertion of script tags in URLs to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2006-2435

Produtos afetados

Ibm Websphere Application Server