| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 7.0= 8.0= 8.5= 9.0 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free