CVE-2015-7472: High severity ibm websphere portal vulnerability

Published Feb 15, 2016

Updated

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers to conduct LDAP injection attacks, and consequently read or write to repository data, via unspecified vectors.

Affected Software

17 affected components

IBM WebSphere Portal=6.1.0.0

IBM WebSphere Portal=6.1.0.1

IBM WebSphere Portal=6.1.0.2

IBM WebSphere Portal=6.1.0.3

IBM WebSphere Portal=6.1.0.4

IBM WebSphere Portal=6.1.0.5

IBM WebSphere Portal=6.1.0.6

IBM WebSphere Portal=6.1.5.0

IBM WebSphere Portal=6.1.5.1

IBM WebSphere Portal=6.1.5.2

IBM WebSphere Portal=6.1.5.3

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.5.0.0

Event History

Feb 15, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7472?

CVE-2015-7472 is considered a medium severity vulnerability due to the potential for LDAP injection attacks.

How do I fix CVE-2015-7472?

To fix CVE-2015-7472, upgrade to the latest version of IBM WebSphere Portal that addresses this vulnerability.

What software versions are affected by CVE-2015-7472?

CVE-2015-7472 affects IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27, 6.1.5 up to 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10.

What are the potential impacts of CVE-2015-7472?

The potential impacts of CVE-2015-7472 include unauthorized reading or writing access to repository data due to LDAP injection.

Who can exploit CVE-2015-7472?

CVE-2015-7472 can be exploited by remote attackers who can initiate LDAP injection attacks through unspecified vectors.