CVE-2015-1932 IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensi...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere virtual enterprise | <= 7.0.0.6 | No fix listed |
| ibm websphere application server | = 7.0.0.1 | No fix listed |
| ibm websphere application server | = 7.0.0.2 | No fix listed |
| ibm websphere application server | = 7.0.0.3 | No fix listed |
| ibm websphere application server | = 7.0.0.4 | No fix listed |
| ibm websphere application server | = 7.0.0.5 | No fix listed |
| ibm websphere application server | = 7.0.0.6 | No fix listed |
| ibm websphere application server | = 7.0.0.7 | No fix listed |
| ibm websphere application server | = 7.0.0.8 | No fix listed |
| ibm websphere application server | = 7.0.0.9 | No fix listed |
| ibm websphere application server | = 7.0.0.10 | No fix listed |
| ibm websphere application server | = 7.0.0.11 | No fix listed |
| ibm websphere application server | = 7.0.0.12 | No fix listed |
| ibm websphere application server | = 7.0.0.13 | No fix listed |
| ibm websphere application server | = 7.0.0.14 | No fix listed |
| ibm websphere application server | = 7.0.0.15 | No fix listed |
| ibm websphere application server | = 7.0.0.16 | No fix listed |
| ibm websphere application server | = 7.0.0.17 | No fix listed |
| ibm websphere application server | = 7.0.0.18 | No fix listed |
| ibm websphere application server | = 7.0.0.19 | No fix listed |
| ibm websphere application server | = 7.0.0.21 | No fix listed |
| ibm websphere application server | = 7.0.0.22 | No fix listed |
| ibm websphere application server | = 7.0.0.23 | No fix listed |
| ibm websphere application server | = 7.0.0.24 | No fix listed |
| ibm websphere application server | = 7.0.0.25 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 7.0.0.27 | No fix listed |
| ibm websphere application server | = 7.0.0.29 | No fix listed |
| ibm websphere application server | = 7.0.0.31 | No fix listed |
| ibm websphere application server | = 7.0.0.32 | No fix listed |
| ibm websphere application server | = 7.0.0.33 | No fix listed |
| ibm websphere application server | = 7.0.0.34 | No fix listed |
| ibm websphere application server | = 7.0.0.36 | No fix listed |
| ibm websphere application server | = 7.0.0.37 | No fix listed |
| ibm websphere application server | = 7.0.0.38 | No fix listed |
| ibm websphere application server | = 8.0.0.0 | No fix listed |
| ibm websphere application server | = 8.0.0.1 | No fix listed |
| ibm websphere application server | = 8.0.0.2 | No fix listed |
| ibm websphere application server | = 8.0.0.3 | No fix listed |
| ibm websphere application server | = 8.0.0.4 | No fix listed |
| ibm websphere application server | = 8.0.0.5 | No fix listed |
| ibm websphere application server | = 8.0.0.6 | No fix listed |
| ibm websphere application server | = 8.0.0.7 | No fix listed |
| ibm websphere application server | = 8.0.0.8 | No fix listed |
| ibm websphere application server | = 8.0.0.9 | No fix listed |
| ibm websphere application server | = 8.0.0.10 | No fix listed |
| ibm websphere application server | = 8.5.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.1 | No fix listed |
| ibm websphere application server | = 8.5.0.2 | No fix listed |
| ibm websphere application server | = 8.5.5.0 | No fix listed |
| ibm websphere application server | = 8.5.5.1 | No fix listed |
| ibm websphere application server | = 8.5.5.2 | No fix listed |
| ibm websphere application server | = 8.5.5.3 | No fix listed |
| ibm websphere application server | = 8.5.5.4 | No fix listed |
| ibm websphere application server | = 8.5.5.5 | No fix listed |
| ibm websphere application server | = 8.5.5.6 | No fix listed |
References
- PI38403 vendor-advisory
- www-01.ibm.com vendor-advisory
- 76466 vdb-entry
- 1033325 vdb-entry