CVE-2007-6679 Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor rol...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | <= 6.0.2.24 | No fix listed |
| ibm websphere application server | = 6.1 | No fix listed |
| ibm websphere application server | = 6.1.0.1 | No fix listed |
| ibm websphere application server | = 6.1.0.2 | No fix listed |
| ibm websphere application server | = 6.1.0.3 | No fix listed |
| ibm websphere application server | = 6.1.0.5 | No fix listed |
| ibm websphere application server | = 6.1.0.7 | No fix listed |
| ibm websphere application server | = 6.1.0.9 | No fix listed |
| ibm websphere application server | = 6.1.0.11 | No fix listed |
References
- 28588 third-party-advisory vendor-advisory
- 1019174 vdb-entry
- www-1.ibm.com
- www-1.ibm.com
- PK45768 vendor-advisory
- ADV-2007-3955 vdb-entry vendor-advisory
- ADV-2008-0241 vdb-entry vendor-advisory