Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0903

EPSS 0.40% · P61
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0903

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remote attackers to bypass intended access restrictions via a crafted request to a JAX-WS application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM WebSphere Application Server 应用JAX-WS访问限制和安全跳过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM WebSphere Application Server (WAS) 7.0.0.3版本之前的7.0版本以及WAS 6.1.0.25版本之前的6.1版本的网络服务的Feature补丁,在一个WS-Security策略在操作水平上建立以后，没有适当地处理入站的请求，并缺少一个SOAPAction或WS-Addressing操作，这会允许远程攻击者可以借助一个特制的对JAX-WS应用程序的请求，绕过预设的访问限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0903

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0903

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-06-24 · 12 CVEs total

CVE-2009-2185Xelerance Openswan和strongSwan X.509证书输入验证错误漏洞
CVE-2009-2208FreeBSD "SIOCSIFINFO_IN6 IOCTL" 权限许可和访问控制漏洞
CVE-2009-2209RS-CMS "rscms_mod_newsview.php" SQL注入漏洞
CVE-2009-1163Cisco Physical Access Gateway畸形报文远程拒绝服务漏洞
CVE-2009-1860Adobe Shockwave Player Director文件解析代码执行漏洞
CVE-2009-1886Samba 格式化字符串漏洞
CVE-2009-1888Samba 权限许可和访问控制问题漏洞
CVE-2009-2045Cisco视频监控产品远程拒绝服务漏洞
CVE-2009-2046Cisco Video Surveillance 2500 Series IP Camera远程信息泄露漏洞
CVE-2009-2186Adobe Shockwave Player Director文件解析代码执行漏洞
CVE-2009-2187Sun Solaris IP(7P)多播接收本地拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0903

No comments yet

Leave a comment