IBM WebSphere Application Server CVE-2015-0174 Information Disclosure Vulnerability

Bugtraq ID:	74215
Class:	Configuration Error
CVE:	CVE-2015-0174
Remote:	Yes
Local:	No
Published:	Mar 30 2015 12:00AM
Updated:	Mar 30 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 8.5.5.4 IBM Websphere Application Server 8.5.5.3 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 8.5.5.2 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 8.5.5.1 IBM Websphere Application Server 8.5.5.0 IBM Websphere Application Server 8.5.0.2 IBM Websphere Application Server 8.5.0.1 IBM Websphere Application Server 8.5.0.0
Not Vulnerable:	IBM Websphere Application Server 8.5.5.5

IBM WebSphere Application Server CVE-2015-0174 Information Disclosure Vulnerability

The IBM WebSphere Application Server is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

IBM WebSphere Application Server CVE-2015-0174 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server CVE-2015-0174 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Application Server CVE-2015-0174 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM WebSphere Application Server Product Page (IBM)
  
• Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere App (IBM)