CVE-2017-1382

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153...

PT-2017-13114

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trust...

PT-2017-13131

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0 Description The issue allows a local attacker to potentially gain access to files with unknown impact due to the application server creating files using default permissions instead of...

CVE-2017-1380: Improper Neutralization of Input During Web Page Generation

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2017-1382: Incorrect Default Permissions

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153...

CVE-2017-1381: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server Proxy Server or On-demand-router ODR 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152...

PT-2017-13122

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Proxy Server or On-demand-router ODR versions 7.0 through 9.0 Description The issue allows a local attacker to obtain sensitive information due to stale data being cached and then served. Recommendations For...

IBM WebSphere MQ 9.0.1 < 9.0.3 Multiple Vulnerabilities

According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is 9.0.1 or 9.0.2 prior to 9.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to the insecure transmission of credentials in...

CVE-2017-1284

IBM MQ (WebSphere MQ) versions affected: 8.x up to 8.0.0.6; 9.0.0.0–9.0.0.1; and 9.0.1–9.0.2 (CD). A local user able to enable/trace may obtain sensitive data from WebSphere Application Server traces, including credentials, via CLIENT transport mode traces. Root cause: traces disclose credentials...

PT-2017-12718

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.1 through 9.0.2 Description A local user with the ability to run or enable trace could obtain sensitive information from WebSphere Application Server traces, including user credentials. Recommendations For IBM...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21991469)

IBM WebSphere Application Server is prone to information discloure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9736

IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information...

PT-2017-10301

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified Description The issue allows a remote attacker to obtain sensitive information by using malformed SOAP requests. Recommendations At the moment, there is no information about a...

CVE-2016-9736: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2017-07382)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WAS version 8.0, 8.5...

CVE-2017-1137

IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549...

CVE-2017-1137: Undefined Security Weakness

IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549...

PT-2017-11964

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.0 through 8.5.5 Description The issue allows a remote attacker to exploit a weakness and obtain sensitive information, potentially gaining unauthorized access to the admin console. Recommendations Fo...

IBM WebSphere Application Server CSRF Vulnerability (swg22001226)

IBM WebSphere Application Server is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

IBM WebSphere Application Server Cross-Site Scripting Vulnerability (CNVD-2017-06809)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM WebSphere...