Lucene search

K
ibmIBME1B7D6427453A97A89D313E5B6D80A1D5816398FEFB18163F49201D6FAD9E0C8
HistoryApr 20, 2020 - 2:39 p.m.

Security Bulletin: A security vulnerability has been identified in the WebSphere Application Server where the Rational Asset Manager is deployed. (CVE-2017-1743)

2020-04-2014:39:19
www.ibm.com
11

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

Summary

In the WebSphere Application Server where the Rational Asset Manager is deployed, a potential information disclosure vulnerability is identified due to improper handling of Administrative Console panel fields. Information about this security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin listed in the Remediation/Fixes section.

Affected Products and Versions

IBM Rational Asset Manager 7.5 and 7.5.1.

NOTE: Rational Asset Manager 7.5.2 and later versions does not support embedded WebSphere Application Server.

Remediation/Fixes

Refer to the following security bulletin for vulnerability details and information about fixes addressed by IBM WebSphere Application Server (WAS).

Affected Supporting Product |

Affected Supporting Product Security Bulletin
—|—

IBM WebSphere Application Server Version 7.0, 8.0, 8.5, and 9.0. |

Security Bulletin: Information Disclosure in WebSphere Application Server (CVE-2017-1743)

Workarounds and Mitigations

None.

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

Related for E1B7D6427453A97A89D313E5B6D80A1D5816398FEFB18163F49201D6FAD9E0C8