3 matches found
IBM WebSphere Application Server 9.0.0.4 Weak Encryption (CVE-2017-1504)
The IBM WebSphere Application Server running on the remote host is version 9.0.0.4. It is, therefore, affected by a weakness in a new feature using the PasswordUtil command to enable AES password encryption. If this feature was used, passwords were not encrypted as expected, resulting in weaker...
Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix
Summary WebSphere Application Server may have insecure file permissions after custom startup scripts are run. The custom startup script will not pull the umask from the server.xml. This may cause some log files to have different permissions then expected. There is an information disclosure in the...
