IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21990056 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093 | Not Applicable |
http://www.securityfocus.com/bid/93013 | |
http://www.securitytracker.com/id/1036838 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-09-30 18:59
Updated : 2017-07-29 18:29
NVD link : CVE-2016-5986
Mitre link : CVE-2016-5986
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
ibm
- websphere_application_server