IBM-XFORCE-235069: Medium severity ibm websphere application server feature pack for web services vulnerability
IBM WebSphere Application Server information disclosure
Other sources
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
Affected Software
Event History
Frequently Asked Questions
What is the severity of IBM-XFORCE-235069?
The severity of IBM-XFORCE-235069 is classified as critical due to the potential for information disclosure.
How do I fix IBM-XFORCE-235069?
To fix IBM-XFORCE-235069, upgrade to the latest version of IBM WebSphere Application Server that addresses this vulnerability.
Who is affected by IBM-XFORCE-235069?
IBM-XFORCE-235069 affects users of IBM WebSphere Application Server versions 7.0 to 9.0 and IBM WebSphere Application Server Liberty.
What type of vulnerabilities does IBM-XFORCE-235069 represent?
IBM-XFORCE-235069 represents an information disclosure vulnerability that can be exploited by authenticated users.
When was IBM-XFORCE-235069 disclosed?
IBM-XFORCE-235069 was disclosed in 2022, highlighting issues with specific configurations of WebSphere Application Server.