Test Kennung:	1.3.6.1.4.1.25623.1.0.811499
Kategorie:	Web Servers
Titel:	IBM WebSphere Application Server Information Disclosure Vulnerability (Aug 2017)
Zusammenfassung:	IBM WebSphere Application Server is prone to an information; disclosure vulnerability.
Beschreibung:	Summary: IBM WebSphere Application Server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists due to a new feature using the PasswordUtil command to enable AES password encryption. If you used this feature, then you have a potential for weaker than expected security since some passwords did not get encrypted as you might have expected. Vulnerability Impact: Successful exploitation will allow remote attackers to get sensitive information. Affected Software/OS: IBM WebSphere Application Server version 9.0.0.4. Solution: Update to version 9.0.0.5 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1504 BugTraq ID: 100137 http://www.securityfocus.com/bid/100137 https://exchange.xforce.ibmcloud.com/vulnerabilities/129579
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.