CVE-2014-3021

Опубликовано: 19 окт. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 does not properly handle HTTP headers, which allows remote attackers to obtain sensitive cookie and authentication data via an unspecified HTTP method.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.14:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.16:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.18:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.22:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.24:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.28:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.29:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.31:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.32:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.33:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.0.0.34:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:-:liberty_profile:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:-:*:*:liberty_profile:*:*:*

EPSS

Процентиль: 52%

0.00294

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-6qvf-pj5p-fr7r

github

больше 3 лет назад