medium4.3
CVE-2012-2170
The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtai…
Impact
The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | Versions 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg1PM56183
- http://www.ibm.com/support/docview.wss?uid=swg21595172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75234
- http://www.ibm.com/support/docview.wss?uid=swg1PM56183
- http://www.ibm.com/support/docview.wss?uid=swg21595172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75234