CVE-2017-1381
low
CVSS v3
3.3
CVSS v2
2.1
VIR risk
3.3
Description
IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152.
Predictions
Exploit likelihood
34%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — https://exchange.xforce.ibmcloud.com/vulnerabilities/127152
Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg22004792
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | websphere_application_server | {"startIncluding":"7.0.0.0","endIncluding":"7.0.0.43"} | |
References
- http://www.ibm.com/support/docview.wss?uid=swg22004792
- http://www.securityfocus.com/bid/99917
- http://www.securitytracker.com/id/1038985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127152
- http://www.ibm.com/support/docview.wss?uid=swg22004792
- http://www.securityfocus.com/bid/99917
- http://www.securitytracker.com/id/1038985
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127152
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.