Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere Application Server安全漏洞
Vulnerability Description
IBM WebSphere Application Server（WAS）是美国IBM公司开发并发行的一款应用服务器产品，它是Java EE和Web服务应用程序的平台，也是IBM WebSphere软件平台的基础。 IBM WebSphere Application Server (WAS) 8.0及之前版本的Web Server Plug-in中存在漏洞，该漏洞源于在plugin-key.kdb密码到期后使用了未加密的HTTP通信。远程攻击者可利用该漏洞通过嗅探网络获取敏感信息，或者借助中间人攻击欺骗任
CVSS Information
N/A
Vulnerability Type
N/A