medium5.0
CVE-2015-1932
IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow rem…
Impact
IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Virtual Enterprise | through 7.0.0.6 |
| Ibm | Websphere Application Server | Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5, 7.0.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI38403
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275
- http://www.securityfocus.com/bid/76466
- http://www.securitytracker.com/id/1033325
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI38403
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275
- http://www.securityfocus.com/bid/76466
- http://www.securitytracker.com/id/1033325