IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_portal | 6.0.1.3 | 6.0.1.3.x |
| ibm / websphere_portal | 7.0.0.0 | 7.0.0.0.x |
| ibm / websphere_portal | 6.1.5.0 | 6.1.5.0.x |
| ibm / websphere_portal | 6.0.1.1 | 6.0.1.1.x |
| ibm / websphere_portal | 6.0.1.4 | 6.0.1.4.x |
| ibm / websphere_portal | 6.0.1.7 | 6.0.1.7.x |
| ibm / websphere_portal | 6.1.0.2 | 6.1.0.2.x |
| ibm / websphere_portal | 6.1.0.1 | 6.1.0.1.x |
| ibm / websphere_portal | 6.0.1.5 | 6.0.1.5.x |
| ibm / websphere_portal | 6.0.1.2 | 6.0.1.2.x |
| ibm / websphere_portal | 6.1.0.3 | 6.1.0.3.x |
| ibm / websphere_portal | 6.1.0.0 | 6.1.0.0.x |
| ibm / websphere_portal | 6.0.1.6 | 6.0.1.6.x |