CVE-2012-2170: Medium severity ibm websphere application server feature pack for web services vulnerability
The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2170?
CVE-2012-2170 is rated as a medium severity vulnerability due to improper access restrictions in IBM WebSphere Application Server.
How do I fix CVE-2012-2170?
To fix CVE-2012-2170, you should upgrade your IBM WebSphere Application Server to version 7.0.0.23 or later.
What type of vulnerability is CVE-2012-2170?
CVE-2012-2170 is an access control vulnerability that allows unauthorized access to sensitive information.
Which versions of WebSphere Application Server are affected by CVE-2012-2170?
CVE-2012-2170 affects IBM WebSphere Application Server versions 7.0.0.1 through 7.0.0.21.
Can CVE-2012-2170 be exploited remotely?
Yes, CVE-2012-2170 can be exploited remotely by attackers to gain access to sensitive client and request information.