Security Bulletin: IBM Maximo Asset Management contains a misconfiguration that could allow a remote attacker to gain elevated privileges on the system (CVE-2015-1927)

Summary IBM Maximo Asset Management configuration files set the attribute serveServletsByClassnameEnabled to true. This vulnerability could allow a remote attacker to gain elevated privileges on the system. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Storage Productivity Center (CVE-2015-1927)

Summary IBM WebSphere Application Server is shipped as a component of IBM Tivoli Storage Productivity Center. Information about a security vulnerability CVE-2015-1927 affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-1927...

Security Bulletin: Vulnerabilities in Websphere Liberty Profile (WLP) affect Power Management Console (CVE-2015-2017, CVE-2015-1927, CVE-2015-4938)

Summary Websphere liberty Profile is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-4938 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to spoof a servlet. An attacker could exploit this...

Security Bulletin: A security vulnerability has been found in IBM WebSphere Application Server 8.5.5.6 shipped with Tivoli Usage and Accounting Manager/SmartCloud Cost Management (CVE-2015-1927)

Summary WebSphere Application Server is shipped as a component of SmartCloud Cost Management. WebSphere Application Server is shipped as a component of Tivoli Integrated Portal, which is shipped as a component of Tivoli Usage and Accounting Manager. Information about a security vulnerability...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server 8.5 shipped with IBM Tivoli System Automation Application Manager 4.1 (CVE-2015-1927)

Summary WebSphere Application Server 8.5 is shipped as a component of IBM Tivoli System Automation Application Manager 4.1. Information about a security vulnerability affecting WebSphere Application Server 8.5 has been published in a security bulletin. Vulnerability Details Please consult the...

Security Bulletin: A security vulnerability has been identified in IBM Operations Analytics - Predictive Insights (CVE-2015-1885, CVE-2015-1927, CVE-2015-1946)

Summary IBM WebSphere Application Server Liberty Core 8.5.5.1 is shipped as a component of IBM Operations Analytics - Predictive Insights. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty Core 8.5.5.1 has been published in a security bulletin...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool /OMNIbus WebGUI (CVE-2015-1927)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security...

Security Bulletin:A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Network Manager IP Edition (CVE-2015-1885, CVE-2015-0250, CVE-2015-1927, and CVE-2015-1946)

Summary IBM WebSphere Application Server is shipped as a component of IBM Tivoli Network Manager IP Edition. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin:A security vulnerability has been identified in IBM WebSphere Application Server affects Tivoli Business Service Manager (CVE-2015-1927)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Business Service Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin PI3162...

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Netcool Impact (CVE-2015-1927)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool/Impact. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin PI31622: Potenti...

Security Bulletin: Three security vulnerabilities have been identified in WebSphere Application Server shipped with IBM eDiscovery Manager (CVE-2015-1885, CVE-2015-1927, CVE-2015-1946)

Summary WebSphere Application Server is shipped as a component of IBM eDiscovery Manager. Information about three security vulnerabilities that affect WebSphere Application Server are published in a security bulletin. Vulnerability Details For more information, see the WebSphere Application Serve...

Security Bulletin: Incorrect setting for serveServletsbyClassname can affect FTM for Check Services and FTM for Corporate Payment Services (CVE-2015-1927)

Summary Incorrect setting for serveServletsbyClassname could allow a remote attacker on WebSphere Application Server to gain elevated privileges on the system for FTM for Check Services and FTM for Corporate Payment Services Vulnerability Details CVEID: CVE-2015-1927 DESCRIPTION: IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Enterprise Service Bus Registry Edition (CVE-2015-1927)

Summary WebSphere Application Server is shipped as a component of WebSphere Enterprise Service Bus Registry Edition. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2015-1946, CVE-2015-1927 )

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2015-1927, CVE-2015-1946, CVE-2015-1885)

Summary WebSphere Application Server is shipped as a component of WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin Vulnerability Details For vulnerability details, see the security bulletin Multipl...

IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)

Binary data 9700.prm...

CVE-2015-1927

CVE-2015-1927 affects IBM WebSphere Application Server (and WAS bundled products). The root cause is a misconfigured WebContainer property, serveServletsByClassnameEnabled, which if not set correctly can allow a remote attacker to gain elevated privileges. Affected WAS versions include 7.0, 8.0, ...