CVE-2017-1741: Infoleak

Published Mar 14, 2018

Updated

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931.

Affected Software

4 affected components

IBM WebSphere Application Server Feature Pack for Web Services=7.0

IBM WebSphere Application Server Feature Pack for Web Services=8.0

IBM WebSphere Application Server Feature Pack for Web Services=8.5

IBM WebSphere Application Server Feature Pack for Web Services=9.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22012342

Event History

Mar 14, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1741?

CVE-2017-1741 is considered a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2017-1741?

To fix CVE-2017-1741, upgrade your IBM WebSphere Application Server to the latest version that addresses this vulnerability.

What can an attacker do with CVE-2017-1741?

An attacker exploiting CVE-2017-1741 could potentially read sensitive files on the file system.

Which versions of IBM WebSphere Application Server are affected by CVE-2017-1741?

CVE-2017-1741 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0.

Is there a workaround for CVE-2017-1741?

Currently, the recommended approach for CVE-2017-1741 is to apply the latest security updates from IBM.