4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
51.0%
IBM Websphere Portal is prone to a denial of service (DoS) vulnerability.
# SPDX-FileCopyrightText: 2016 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = 'cpe:/a:ibm:websphere_portal';
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.810315");
script_version("2023-07-20T05:05:17+0000");
script_cve_id("CVE-2016-5954");
script_tag(name:"cvss_base", value:"4.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:N/I:N/A:P");
script_tag(name:"last_modification", value:"2023-07-20 05:05:17 +0000 (Thu, 20 Jul 2023)");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2016-11-28 20:30:00 +0000 (Mon, 28 Nov 2016)");
script_tag(name:"creation_date", value:"2016-12-20 15:28:21 +0530 (Tue, 20 Dec 2016)");
script_tag(name:"qod_type", value:"remote_banner");
script_name("IBM WebSphere Portal Content Manager Denial Of Service Vulnerability");
script_tag(name:"summary", value:"IBM Websphere Portal is prone to a denial of service (DoS) vulnerability.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"The flaw exists due to an error in content
manager which allow uploading temporary files to application without proper
validation.");
script_tag(name:"impact", value:"Successful exploitation will allow a remote
attacker to cause a denial of service by uploading temporary files.");
script_tag(name:"affected", value:"IBM WebSphere Portal 6.1.0 before
6.1.0.6 CF27, 6.1.5 before 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF30,
8.0.0 before 8.0.0.1 CF21, and 8.5.0 before CF12");
script_tag(name:"solution", value:"Upgrade to IBM WebSphere Portal 6.1.0.6
with Cumulative Fix 27 (CF27), or 6.1.5.3 with Cumulative Fix 27 (CF27), or
7.0.0.2 with Cumulative Fix 30 (CF30), or 8.0.0.1 with Cumulative Fix 21 (CF21),
or 8.5.0 with Cumulative Fix 12 (CF12), or later.");
script_tag(name:"solution_type", value:"VendorFix");
script_xref(name:"URL", value:"http://www-01.ibm.com/support/docview.wss?uid=swg21989993");
script_xref(name:"URL", value:"http://www.securityfocus.com/bid/93017");
script_xref(name:"URL", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/116099");
script_xref(name:"URL", value:"http://www.securitytracker.com/id/1036762");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2016 Greenbone AG");
script_family("Denial of Service");
script_dependencies("gb_ibm_websphere_portal_detect.nasl");
script_mandatory_keys("ibm_websphere_portal/installed");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
if(!webPort = get_app_port(cpe:CPE)){
exit(0);
}
if(!webVer = get_app_version(cpe:CPE, port:webPort)){
exit(0);
}
if(webVer =~ "^8\.5\.0")
{
if(version_is_less(version:webVer, test_version:"8.5.0.0.12"))
{
fix = "8.5.0.0 CF12";
VULN = TRUE;
}
}
else if(webVer =~ "^8\.0\.0")
{
if(version_is_less(version:webVer, test_version:"8.0.0.1.21"))
{
fix = "8.0.0.1 CF21";
VULN = TRUE;
}
}
else if(webVer =~ "^7\.0\.0")
{
if(version_is_less(version:webVer, test_version:"7.0.0.2.30"))
{
fix = "7.0.0.2 CF30";
VULN = TRUE;
}
}
else if(webVer =~ "^6\.1\.5")
{
if(version_is_less(version:webVer, test_version:"6.1.5.3.27"))
{
fix = "6.1.5.3 CF27";
VULN = TRUE;
}
}
else if(webVer =~ "^6\.1\.0")
{
if(version_is_less(version:webVer, test_version:"6.1.0.6.27"))
{
fix = "6.1.0.6 CF27";
VULN = TRUE;
}
}
if(VULN)
{
report = report_fixed_ver(installed_version:webVer, fixed_version:fix);
security_message(data:report, port:webPort);
exit(0);
}
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
51.0%