CVE-2017-1381

published 2017-07-21

CVE-2017-1381: IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information…

low 3.3 CVSS 3.0

AV L AC L PR L UI N S U C L I N A N

IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	7.0.0.0 – 7.0.0.43	—
ibm	websphere_application_server	8.0.0.0 – 8.0.0.13	—
ibm	websphere_application_server	8.5.0.0 – 8.5.5.12	—
ibm	websphere_application_server	9.0.0.0 – 9.0.0.4	—

CWE-200