IBM WebSphere Application Server CVE-2014-0857 Unspecified Information Disclosure Vulnerability

Bugtraq ID:	67327
Class:	Input Validation Error
CVE:	CVE-2014-0857
Remote:	Yes
Local:	No
Published:	May 01 2014 12:00AM
Updated:	Jun 26 2014 03:54PM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 6.1 IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 8.0
Not Vulnerable:

IBM WebSphere Application Server CVE-2014-0857 Unspecified Information Disclosure Vulnerability

The IBM WebSphere Application Server is prone to an unspecified information-disclosure vulnerability in the administration console.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

The following versions are vulnerable:

IBM WebSphere Application Server 8.5.0.0 through 8.5.5.1
IBM WebSphere Application Server 8.0.0.0 through 8.0.0.8

IBM WebSphere Application Server CVE-2014-0857 Unspecified Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

IBM WebSphere Application Server CVE-2014-0857 Unspecified Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.