CVE-2017-1698: Infoleak
Published Dec 27, 2017
·Updated
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
Affected Software
4 affected components
IBM WebSphere Portal=7.0.0.0
IBM WebSphere Portal=8.0.0.0
IBM WebSphere Portal=8.5.0.0
IBM WebSphere Portal=9.0.0.0
Event History
Dec 27, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1698?
CVE-2017-1698 is considered a medium severity vulnerability due to its potential to leak sensitive information.
2
How do I fix CVE-2017-1698?
To fix CVE-2017-1698, apply the latest security patches or updates provided by IBM for the affected versions of WebSphere Portal.
3
Which versions of IBM WebSphere Portal are affected by CVE-2017-1698?
CVE-2017-1698 affects IBM WebSphere Portal versions 7.0, 8.0, 8.5, and 9.0.
4
What type of information could be leaked by CVE-2017-1698?
CVE-2017-1698 could potentially reveal sensitive information contained in error messages.
5
Is there a workaround for CVE-2017-1698 if I cannot apply a patch?
If you cannot apply a patch for CVE-2017-1698, consider disabling detailed error messages in the configuration settings.