Description (CNA)
The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75234
- http://www.ibm.com/support/docview.wss?uid=swg1PM56183
- http://www.ibm.com/support/docview.wss?uid=swg21595172
ADP enrichment
No English description supplied.