PT-2019-9949 · Ibm · Ibm Websphere Application Server

Publicado 2019-02-19 · Atualizado 2020-08-24 · CVE-2018-1996

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0

Description The issue is caused by improper TLS configuration, which could provide weaker than expected security. A remote attacker could exploit this to obtain sensitive information using man-in-the-middle techniques.

Recommendations For versions 7.0 through 9.0, update the TLS configuration to ensure proper security settings are in place to prevent man-in-the-middle attacks.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2018-1996

Produtos afetados

Ibm Websphere Application Server

Referências · 5

• http://securityfocus.com/bid/107155 · Nota
• https://ibm.com/support/docview.wss?uid=ibm10793421 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/154650 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1996 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1996 · Nota de Segurança