PT-2012-3846
CVE-2012-2162
·
تاريخ النشر
2012-05-01
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Application Server (WAS) versions 8.0 and earlier
Description
The issue allows remote attackers to obtain sensitive information by sniffing the network or spoof arbitrary servers via a man-in-the-middle attack due to the use of unencrypted HTTP communication after the expiration of the plugin-key.kdb password.
Recommendations
For IBM WebSphere Application Server (WAS) versions 8.0 and earlier, update the plugin-key.kdb password to prevent the use of unencrypted HTTP communication.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾