CVE-2015-4938

MEDIUM

Description

IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 allows remote attackers to spoof servlets and obtain sensitive information via unspecified vectors.

References

http://www.securityfocus.com/bid/76463

http://www.securitytracker.com/id/1033324

http://www-01.ibm.com/support/docview.wss?uid=swg1PI37396

http://www-01.ibm.com/support/docview.wss?uid=swg21963275

Details

Source: MITRE

Published: 2015-08-22

Updated: 2016-12-24

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM