CVE-2006-6136

Published: Nov 28, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors.

Affected (1)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 6.1.0

References (12)

http://secunia.com/advisories/23028

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013830

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg27007951

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/search.wss?rs=0&q=PK29847&apar=only

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/21204

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4639

Source: cve@mitre.org

http://secunia.com/advisories/23028