CVE-2017-1731
First published: Tue Jan 30 2018(Updated: )
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Application Server Feature Pack for Web Services | >=7.0.0.0<=7.0.0.43 | |
| IBM WebSphere Application Server Feature Pack for Web Services | >=8.0.0.0<=8.0.0.14 | |
| IBM WebSphere Application Server Feature Pack for Web Services | >=8.5.0.0<=8.5.5.13 | |
| IBM WebSphere Application Server Feature Pack for Web Services | >=9.0.0.0<=9.0.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-1731?
The severity of CVE-2017-1731 is considered to be high due to potential privilege escalation risks.
How do I fix CVE-2017-1731?
To fix CVE-2017-1731, upgrade to the latest version of IBM WebSphere Application Server that is not affected by this vulnerability.
What versions of IBM WebSphere Application Server are affected by CVE-2017-1731?
CVE-2017-1731 affects versions 7.0, 8.0, 8.5, and 9.0 of IBM WebSphere Application Server up to specific patch levels.
Can CVE-2017-1731 be exploited remotely?
Yes, CVE-2017-1731 can be exploited by an authenticated remote attacker to gain elevated privileges.
Is authentication required to exploit CVE-2017-1731?
Yes, exploitation of CVE-2017-1731 requires the attacker to be authenticated.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm websphere application server feature pack for web services
- version/ibm websphere application server feature pack for web services/7.0.0.0
- version/ibm websphere application server feature pack for web services/7.0.0.43
- version/ibm websphere application server feature pack for web services/8.0.0.0
- version/ibm websphere application server feature pack for web services/8.0.0.14
- version/ibm websphere application server feature pack for web services/8.5.0.0
- version/ibm websphere application server feature pack for web services/8.5.5.13
- version/ibm websphere application server feature pack for web services/9.0.0.0
- version/ibm websphere application server feature pack for web services/9.0.0.6