CVE-2010-1942

Опубликовано: 19 мая 2010

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device.

Ссылки

http://jvn.jp/en/jp/JVN90248889/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html
http://osvdb.org/64703
http://secunia.com/advisories/39803
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html
Vendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/40189
http://www.vupen.com/english/advisories/2010/1165
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58634
http://jvn.jp/en/jp/JVN90248889/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html
http://osvdb.org/64703
http://secunia.com/advisories/39803
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html
Vendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/40189
http://www.vupen.com/english/advisories/2010/1165
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58634

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fujitsu:interstage_application_server:3.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:3.0:*:standard:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:standard:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:4.0:*:web_j:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:4.1:*:standard:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:4.1:*:web_j:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:standard:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:web_j:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:5.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:5.0.1:*:plus_developer:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:6.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:6.0:*:plus:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:standard:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*

EPSS

Процентиль: 73%

0.00762

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-qrxr-jvmh-w76v

github

больше 3 лет назад