IBM WebSphere Application Server (WAS) is shipped as a component of IBM Tivoli Security Policy Manager (TSPM). Information about a security vulnerabilities affecting IBM WebSphere Application Server have been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin, Security Bulletin: Security Vulnerabilities in IBM HTTP Server (CVE-2017-9798, CVE-2017-12618), for vulnerability details and information about fixes**.**

Affected Products and Versions

Product Version

| WebSphere version
—|—
TSPM 7.1| WAS V7.0
RTSS 7.1| WAS V7.0, V8.0

Note: TSPM is comprised of TSPM and Runtime Security Services (RTSS).

CPENameOperatorVersion
tivoli security policy managereq7.1

CPE	Name	Operator	Version
	tivoli security policy manager	eq	7.1

nessus 61

ibm 22

fedora 4

amazon 2

openvas 36

osv 5

prion 2

debian 4

ubuntucve 2

redhatcve 2

archlinux 2

cve 2

debiancve 2

ubuntu 3

mageia 3

altlinux 3

hackerone 1

veracode 1

redhat 13

httpd 2

centos 2

checkpoint_advisories 2

f5 1

exploitpack 1

alpinelinux 1

oraclelinux 2

zdt 1

freebsd 1

slackware 1

seebug 1

exploitdb 1

attackerkb 1

photon 1

trendmicroblog 1

avleonov 1

gentoo 1

suse 1

symantec 1

kitploit 1

apple 5

nessus

IBM HTTP Server 7.0.0.0 < 7.0.0.45 / 8.0.0.0 < 8.0.0.15 / 8.5.0.0 < 8.5.5.13 / 9.0.0.0 < 9.0.0.6 Multiple Vulnerabilities (298437)

2020-12-10 00:00:00

EulerOS 2.0 SP3 : apr-util (EulerOS-SA-2022-1704)

2022-05-26 00:00:00

Debian DLA-1163-1 : apr-util security update

2017-11-07 00:00:00

ibm

Security Bulletin: Security Vulnerabilities in IBM HTTP Server (CVE-2017-9798, CVE-2017-12618)

2018-06-15 07:08:17

Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-9798, CVE-2017-12618)

2018-06-15 07:08:31

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-9798, CVE-2017-12618)

2020-02-04 16:40:40

fedora

[SECURITY] Fedora 26 Update: apr-util-1.5.4-6.fc26

2017-11-15 20:21:54

[SECURITY] Fedora 26 Update: httpd-2.4.27-3.fc26

2017-09-22 18:54:37

[SECURITY] Fedora 27 Update: httpd-2.4.27-8.fc27

2017-09-30 07:40:09

amazon

Medium: apr-util

2017-12-05 21:59:00

Important: httpd24, httpd

2017-09-18 15:32:00

openvas

Ubuntu: Security Advisory (USN-5737-1)

2022-11-24 00:00:00

Debian: Security Advisory (DLA-1163-1)

2023-03-08 00:00:00

SUSE: Security Advisory (SUSE-SU-2017:3278-1)

2021-04-19 00:00:00

osv

apr-util vulnerability

2022-11-23 10:09:39

apr-util - security update

2017-11-06 00:00:00

CVE-2017-9798

2017-09-18 15:29:00

prion

Out-of-bounds

2017-10-24 01:29:00

Design/Logic Flaw

2017-09-18 15:29:00

debian

[SECURITY] [DLA 1163-1] apr-util security update

2017-11-06 21:39:07

[SECURITY] [DSA 3980-1] apache2 security update

2017-09-20 09:20:19

[SECURITY] [DSA 3980-1] apache2 security update

2017-09-20 09:20:19

ubuntucve

CVE-2017-12618

2017-10-24 00:00:00

CVE-2017-9798

2017-09-18 00:00:00

redhatcve

CVE-2017-12618

2017-10-26 09:48:57

CVE-2017-9798

2019-10-09 11:45:40

archlinux

[ASA-201710-33] apr-util: denial of service

2017-10-27 00:00:00

[ASA-201709-15] apache: information disclosure

2017-09-18 00:00:00

cve

CVE-2017-12618

2017-10-24 01:29:00

CVE-2017-9798

2017-09-18 15:29:00

debiancve

CVE-2017-12618

2017-10-24 01:29:00

CVE-2017-9798

2017-09-18 15:29:00

ubuntu

APR-util vulnerability

2022-11-23 00:00:00

Apache HTTP Server vulnerability

2017-09-19 00:00:00

Apache HTTP Server vulnerability

2017-10-24 00:00:00

mageia

Updated apr-util packages fix security vulnerability

2017-11-27 00:18:31

Updated apache packages fix security vulnerability

2018-01-01 13:38:51

Updated apache packages fix security vulnerability

2018-01-01 13:38:51

altlinux

Security fix for the ALT Linux 8 package apache2 version 1:2.4.28-alt1

2017-10-10 00:00:00

Security fix for the ALT Linux 10 package apache2 version 1:2.4.28-alt1

2017-10-10 00:00:00

Security fix for the ALT Linux 9 package apache2 version 1:2.4.28-alt1

2017-10-10 00:00:00

hackerone

Internet Bug Bounty: Optionsbleed / CVE-2017-9798

2017-09-19 18:04:00

veracode

Use After Free

2019-01-15 09:20:26

redhat

(RHSA-2017:2882) Moderate: httpd security update

2017-10-11 15:17:48

(RHSA-2017:3018) Moderate: httpd24 security, bug fix, and enhancement update

2017-10-24 08:16:35

(RHSA-2017:2972) Moderate: httpd security update

2017-10-19 14:54:11

httpd

Apache Httpd < 2.4.28 : Use-after-free when using <Limit > with an unrecognized method in .htaccess ("OptionsBleed")

2017-07-12 00:00:00

Apache Httpd < 2.2.35-never : Use-after-free when using <Limit > with an unrecognized method in .htaccess ("OptionsBleed")

2017-07-12 00:00:00

centos

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

2017-10-11 20:46:20

httpd, mod_ssl security update

2017-10-20 21:13:38

checkpoint_advisories

Apache HTTP Optionsbleed Memory Leak (CVE-2017-9798)

2017-09-18 00:00:00

Apache HTTP OptionsBleed Memory Leak Scanner (CVE-2017-9798)

2017-10-15 00:00:00

K70084351 : Apache HTTPD vulnerability CVE-2017-9798

2017-09-19 00:00:00

exploitpack

Apache 2.2.34 2.4.27 - OPTIONS Memory Leak

2017-09-18 00:00:00

alpinelinux

CVE-2017-9798

2017-09-18 15:29:00

oraclelinux

httpd security update

2017-10-11 00:00:00

httpd security update

2017-10-19 00:00:00

zdt

Apache - HTTP OPTIONS Memory Leak Exploit

2017-09-18 00:00:00

freebsd

Apache -- HTTP OPTIONS method can leak server memory

2017-09-18 00:00:00

slackware

[slackware-security] httpd

2017-09-18 19:20:15

seebug

HTTP OPTIONS method can leak Apache's server memory(CVE-2017-9798) (Optionsbleed)

2017-09-19 00:00:00

exploitdb

Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak

2017-09-18 00:00:00

attackerkb

CVE-2017-9798

2017-09-18 00:00:00

photon

Important Photon OS Security Update - PHSA-2017-0077

2017-10-11 00:00:00

trendmicroblog

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of September 18, 2017

2017-09-22 14:10:02

avleonov

Vulnerability Databases: Classification and Registry

2018-06-05 15:57:41

gentoo

Apache: Multiple vulnerabilities

2017-10-29 00:00:00

suse

Security update for virtualbox (important)

2018-04-24 03:20:04

symantec

Apache HTTP Server Vulnerabilities Jul 2017 - Sep 2018

2018-11-07 08:01:01

kitploit

Jok3R - Network And Web Pentest Framework

2019-01-23 12:25:00

apple

About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan - Apple Support

2020-07-27 08:21:38

About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan

2017-12-06 00:00:00

About the security content of macOS Mojave 10.14

2018-09-24 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

Related for 99C4FE5226D6D4C3DFB065D997F2D2D168A50F2B090813B4AFFCC6BF971F9576