CVEvulnerability

CVE-2012-2170

4.3 MEDIUM Published 2012-06-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.

Affected configurations

• ibm websphere application server 7.0 • ibm websphere application server 7.0.0.1 • ibm websphere application server 7.0.0.2 • ibm websphere application server 7.0.0.3 • ibm websphere application server 7.0.0.4 • ibm websphere application server 7.0.0.5 • ibm websphere application server 7.0.0.6 • ibm websphere application server 7.0.0.7 • ibm websphere application server 7.0.0.8 • ibm websphere application server 7.0.0.9 • ibm websphere application server 7.0.0.11 • ibm websphere application server 7.0.0.13 • ibm websphere application server 7.0.0.15 • ibm websphere application server 7.0.0.17 • ibm websphere application server 7.0.0.19 • ibm websphere application server 7.0.0.21

Related

Weakness · not in database (1)

References