NetSight
IP …
medium5.3

CVE-2018-1996

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration.

Impact

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 154650.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 7.0.0.0 through 7.0.0.45
from 8.0.0.0 through 8.0.0.15
from 8.5.0.0 through 8.5.5.14
from 9.0.0.0 through 9.0.0.10

Weakness classification

CWE-327

References