CVEvulnerability
CVE-2012-3304
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.
Affected configurations
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.4
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 6.1.0.35
• ibm websphere application server 6.1.0.37
• ibm websphere application server 6.1.0.39
• ibm websphere application server 6.1.0.41
• ibm websphere application server 6.1.0.43
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.14
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.16
• ibm websphere application server 7.0.0.17
• ibm websphere application server 7.0.0.19
• ibm websphere application server 7.0.0.21
• ibm websphere application server 7.0.0.23
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
• ibm websphere application server 8.0.0.4
• ibm websphere application server 8.5.0.0
References
- http://osvdb.org/85733 osvdb.org
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21611313 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77476 exchange.xforce.ibmcloud.com
- http://osvdb.org/85733 osvdb.org
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21611313 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77476 exchange.xforce.ibmcloud.com