Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.35

Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 7.0.0.35, IBM WebSphere Application Server Hypervisor 7.0.0.35 and IBM HTTP Server 7.0.0.35. Vulnerability Details CVE ID:CVE-2014-3021 APAR PI08268 DESCRIPTION: IBM WebSphere Application Server cou...

IBM WebSphere Application Server 8.0.0.x < 8.0.0.10 Multiple Vulnerabilities

Binary data 700045.prm...

IBM WebSphere Application Server 8.5.5.x < 8.5.5.4 Multiple Vulnerabilities

Binary data 700046.prm...

IBM WebSphere Application Server 7.0.0.x < 7.0.0.35 Multiple Vulnerabilities

Binary data 700044.prm...

CVE-2014-3021

CVE-2014-3021 affects IBM WebSphere Application Server (WAS) versions 7.0 (up to 7.0.0.35), 8.0 (up to 8.0.0.10), and 8.5 (up to 8.5.5.4). Description: an HTTP header handling flaw could allow a remote attacker to obtain sensitive cookie and authentication data via an unspecified HTTP method. Imp...