http://www.ibm.com/support/docview.wss?uid=swg22013601

104134

1040890

ibm-websphere-cve20171743-info-disc(134933)

The IBM WebSphere Application Server running on the remote host is version 7.0.0.0 through 7.0.0.45, 8.0.0.0 through 8.0.0.15, 8.5.0.x prior to 8.5.5.14, or 9.0.x prior to 9.0.0.8. It is, therefore, affected by an information disclosure vulnerability that allows a remote, authenticated attacker to browse the file system due to improper handling of Administrative Console panel fields. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2017-1743

medium

Tenable Plugins

medium