CVE-2008-5675

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuthTAI."

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/33132Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27007603Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PK75304
http://www.osvdb.org/50720
http://www.vupen.com/english/advisories/2008/3427
http://secunia.com/advisories/33132Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27007603Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PK75304
http://www.osvdb.org/50720
http://www.vupen.com/english/advisories/2008/3427

Timeline

Published: Dec 19, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-56765.0Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCa CVE-2008-56777.1Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authen CVE-2008-56784.0Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via th CVE-2008-56799.3The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid CVE-2008-56809.3Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow CVE-2008-56814.3Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscri CVE-2008-56824.3Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XS CVE-2008-56837.8Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors.CVE-2008-56845.0Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allo CVE-2008-568510.0Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System C CVE-2008-56868.5IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that CVE-2008-56875.0MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might a