漏洞信息详情
IBM WebSphere Application Server 信息泄露漏洞
漏洞简介
IBM WebSphere Application Server(WAS)是美国IBM公司开发并发行的一款应用服务器产品,它是Java EE和Web服务应用程序的平台,也是IBM WebSphere软件平台的基础。
IBM WAS 8.5版本和9.0版本中存在安全漏洞。远程攻击者可利用该漏洞降级TLS协议。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://www-01.ibm.com/support/docview.wss?uid=ibm10718837
参考网址
来源:CONFIRM
链接:https://www.ibm.com/support/docview.wss?uid=ibm10718837
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/147292
来源:SECTRACK
链接:http://www.securitytracker.com/id/1041718
来源:www.ibm.com
链接:http://www.ibm.com/support/docview.wss?uid=ibm10958549
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-have-been-addressed-ibm-security-privileged-identity-manager
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/security-bulletin-ibm-security-privileged-identity-manager-affected-multiple-vulnerabilities-0
来源:www-01.ibm.com
链接:https://www-01.ibm.com/support/docview.wss?uid=ibm10795183
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2811/
来源:www.ibm.com
链接:http://www.ibm.com/support/docview.wss?uid=ibm10957781
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3554/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2463/
来源:www.ibm.com
链接:http://www.ibm.com/support/docview.wss?uid=ibm10873140
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2500/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2532/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2355/
受影响实体
- Ibm Websphere_application_server:9.0.0.8<!--2000-1-1-->
- Ibm Websphere_application_server:9.0.0.7<!--2000-1-1-->
- Ibm Websphere_application_server:9.0.0.6<!--2000-1-1-->
- Ibm Websphere_application_server:9.0.0.5<!--2000-1-1-->
- Ibm Websphere_application_server:9.0.0.4<!--2000-1-1-->
补丁
- IBM WebSphere Application Server 安全漏洞的修复措施<!--2018-9-17-->
还没有评论,来说两句吧...