IBM WebSphere Service Registry and Repository（WSRR）のバージョンは、 8.5.0.1より前の8.5です。したがって、次の複数の脆弱性による影響を受けます：

  - An unspecified DOM based cross-site scripting (XSS) vulnerability in the WSRR web UI. (CVE-2014-6132)

  - WSSR web interface issues a cookie that is not declared SSL only. (CVE-2014-6153)

  - An unspecified path traversal vulnerability in the SERVICEREGISTRY UI. (CVE-2014-6155)

  - A session persistence flaw in which users remain logged into SERVICEREGISTRYDASHBOARD when using WebSEAL or Chrome. (CVE-2014-6160)

検出

IBM WebSphere Service Registry and Repository 8.5 < 8.5.0.1 の複数の脆弱性

medium Nessus プラグイン ID 80859

変更ログが見つかりません