| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 7.0= 7.0.0.1= 7.0.0.3= 7.0.0.5= 7.0.0.7= 7.0.0.8 |
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free