IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.
References
| Link | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R | Vendor Advisory |
| http://www.securityfocus.com/bid/102911 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040356 | Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 | VDB Entry Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R | Vendor Advisory |
| http://www.securityfocus.com/bid/102911 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040356 | Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/102911 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1040356 - Third Party Advisory, VDB Entry | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 - VDB Entry, Vendor Advisory |
Information
Published : 2018-01-30 18:29
Updated : 2024-11-21 03:22
NVD link : CVE-2017-1731
Mitre link : CVE-2017-1731
CVE.ORG link : CVE-2017-1731
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE