CVE-2009-2090: Medium severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability

Published Aug 13, 2009

Updated

Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors.

Affected Software

4 affected components

IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.4

IBM WebSphere Application Server Feature Pack for Web Services=7.0

IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.3

IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Event History

Aug 13, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2090?

The severity of CVE-2009-2090 is rated as medium, with a score of 5.

What type of vulnerability is CVE-2009-2090?

CVE-2009-2090 is an unspecified vulnerability that allows remote attackers to bypass intended access restrictions.

How can I fix CVE-2009-2090?

CVE-2009-2090 can be fixed by applying the available patch from IBM.

What impact does CVE-2009-2090 have on IBM WebSphere Application Server?

CVE-2009-2090 allows attackers to cause a denial of service in IBM WebSphere Application Server due to bypassing access restrictions.

Which versions of IBM WebSphere Application Server are affected by CVE-2009-2090?

CVE-2009-2090 affects IBM WebSphere Application Server 7.0 before version 7.0.0.5.