Description
IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."
References
- 43081 third-party-advisory
- websphere-portal-unspecified-info-disclosure(64890) vdb-entry
- ADV-2011-0223 vdb-entry
- PM25698 vendor-advisory
- VU#375127 third-party-advisory
- PM24319 vendor-advisory
- PM24320 vendor-advisory
- PM26397 vendor-advisory
- PM25191 vendor-advisory
- 70688 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21460422
- PM22167 vendor-advisory
- PM22159 vendor-advisory
- 45989 vdb-entry