CVE-2015-0174

The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2015-04-27

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Websphere Application Server (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI21072
• http://www-01.ibm.com/support/docview.wss?uid=swg21697368
• http://www.securitytracker.com/id/1032190