| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 7.0.0.0= 7.0.0.1= 7.0.0.11= 7.0.0.13= 7.0.0.15= 7.0.0.17= 7.0.0.19= 7.0.0.2= 7.0.0.21= 7.0.0.23= 7.0.0.25= 7.0.0.27= 7.0.0.29= 7.0.0.3= 7.0.0.31= 7.0.0.33= 7.0.0.35= 7.0.0.37= 7.0.0.39= 7.0.0.4= 7.0.0.5= 7.0.0.7= 7.0.0.9= 8.0.0.0= 8.0.0.1= 8.0.0.10= 8.0.0.11= 8.0.0.12= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.0.0.9= 8.5.0.0= 8.5.0.1= 8.5.0.2= 8.5.5.0= 8.5.5.1= 8.5.5.2= 8.5.5.3= 8.5.5.4= 8.5.5.5= 8.5.5.6= 8.5.5.7= 8.5.5.8= 8.5.5.9 |
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free