CVE-2007-3397: Medium severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3397?
CVE-2007-3397 is classified as a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2007-3397?
To fix CVE-2007-3397, upgrade IBM WebSphere Application Server to version 6.0.2.21 or 6.1.0.9 or later.
What type of information can be exposed due to CVE-2007-3397?
CVE-2007-3397 may allow remote attackers to access response data that was meant for a different request, potentially exposing sensitive information.
Which versions of IBM WebSphere Application Server are affected by CVE-2007-3397?
CVE-2007-3397 affects IBM WebSphere Application Server versions prior to 6.0.2.21 and 6.1.x versions before 6.1.0.9.
Is there a workaround for CVE-2007-3397?
While upgrading is the recommended solution, temporarily disabling any features that utilize closed connections may provide limited mitigation for CVE-2007-3397.