CVE-2019-4477: Medium severity ibm websphere application server feature pack for web services vulnerability
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.
Other sources
IBM WebSphere Application Server could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4477?
The severity of CVE-2019-4477 is classified as medium, indicating a moderate risk of information exposure.
Who is affected by CVE-2019-4477?
CVE-2019-4477 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0.
How do I fix CVE-2019-4477?
To fix CVE-2019-4477, apply the appropriate patches or updates provided by IBM for your WebSphere Application Server version.
What kind of information can be exposed due to CVE-2019-4477?
CVE-2019-4477 can allow unauthorized users with access to audit logs to obtain sensitive information related to the application.
Is there a workaround for CVE-2019-4477 until a fix can be applied?
Currently, it is recommended to restrict access to audit logs as a temporary mitigation for CVE-2019-4477.