IBM WebSphere Application Server CVE-2017-1137 Information Disclosure Vulnerability

Bugtraq ID:	98419
Class:	Design Error
CVE:	CVE-2017-1137
Remote:	Yes
Local:	No
Published:	May 10 2017 12:00AM
Updated:	May 10 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 8.5.5 IBM Websphere Application Server 8.5 IBM Websphere Application Server 8.0
Not Vulnerable:

IBM WebSphere Application Server CVE-2017-1137 Information Disclosure Vulnerability

IBM WebSphere Application Server is prone to an unspecified information disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

IBM WebSphere Application Server 8.5, 8.5.5 and 8.0 are vulnerable.

IBM WebSphere Application Server CVE-2017-1137 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server CVE-2017-1137 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Application Server CVE-2017-1137 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg21998469: Potential security vulnerability in WebSphere Application Server Ad (IBM)