CVE-2007-6679

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-10 · updated 2026-06-16

Description

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected.

Affected products

IBM WebSphere Application Server: through 6.0.2.24; 6.1, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.5, 6.1.0.7 (+2)

References

http://secunia.com/advisories/28588
http://securitytracker.com/id?1019174
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg27006876
http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only
http://www.vupen.com/english/advisories/2007/3955
http://www.vupen.com/english/advisories/2008/0241
http://secunia.com/advisories/28588
http://securitytracker.com/id?1019174
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg27006876
http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only

Get alerted when CVE-2007-6679 or the next vulnerability affects your stack