CVE-2015-1932
Summary
| CVE | CVE-2015-1932 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-08-22 23:59:01 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Websphere Application Server | 7.0.0.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.10 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.11 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.12 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.13 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.14 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.15 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.16 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.17 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.18 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.19 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.21 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.22 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.23 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.24 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.25 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.27 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.29 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.3 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.31 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.32 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.33 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.34 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.36 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.37 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.38 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.4 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.5 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.6 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.7 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.8 | All | All | All |
| Application | Ibm | Websphere Application Server | 7.0.0.9 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.0 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.10 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.3 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.4 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.5 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.6 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.7 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.8 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.0.0.9 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.0.0 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.0.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.0.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.0 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.3 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.4 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.5 | All | All | All |
| Application | Ibm | Websphere Application Server | 8.5.5.6 | All | All | All |
| Application | Ibm | Websphere Virtual Enterprise | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM Security Bulletin: Multiple Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.11 - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| IBM WebSphere Application Server Access Control Flaw Lets Remote Users Obtain Information About the Target Proxy Server - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Multiple IBM Products CVE-2015-1932 Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM notice: The page you requested cannot be displayed | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.