Vulnerability identifier: #VU71483
Vulnerability risk: Medium
Exploitation vector: Network
Exploit availability: No
Vendor: IBM Corporation
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to the IBM WebSphere Application Server traditional container uses
weaker than expected cryptographic keys that could allow an attacker to
decrypt sensitive information.A remote attacker can gain access to sensitive information.
Note, this affects only the containerized version of WebSphere Application Server traditional.
Install updates from vendor's website.
Vulnerable software versions
IBM WebSphere Application Server: 184.108.40.206 - 220.127.116.11, 18.104.22.168 - 22.214.171.124
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?