Vulnerability Bulletins

IBM Security Bulletin: Security Vulnerability in IBM WebSphere Application Server affects IBM WebSphere Partner Gateway Advanced/Enterprise (CVE-2015-1920)


System information

   
Affected software IBM

Description

Websphere Partner Gateway Advanced/Enterprise editions use WebSphere Application Server. WebSphere Application Server and WebSphere Application Server Hypervisor Edition could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions. CVE(s): CVE-2015-1920 Affected product(s) and affected version(s): WebSphere Partner Gateway Advanced/Enterprise Edition Versions 6.2 through 6.2.1.4 Refer to the following

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_security_vulnerability_in_ibm_websphere_application_server_affects_ibm_websphere_partner_gateway_advanced_enterprise_cve_2015_1920?lang=en_us

Standar resources

Property Value
CVE CVE-2015-1920 ,CVE-2015-0488 ,CVE-2015-1916 ,CVE-2015-2808 ,CVE-2015-0204 ,CVE-2015-1793 ,CVE-2015-4000 and CVE-2015-0478.

Version history

Version Comments Date
1.0 Advisory issued 2015-07-21
Ministerio de Defensa
CNI
CCN
CCN-CERT