CVE-2008-5411

Description

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over unsecured TCP, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Risk Information

Base Score
7.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.427

Associated Vulnerability

VulnerabilityOS Platform
Update websphere_application_server 7.0 to latest versionWindows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234