CVE-2015-0174

IBM WebSphere Application Server 8.5 - Authenticated Sensitive Information Exposure via SNMP

Title source: llm
STIX 2.1

Description

The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

References (3)

Core 3
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI21072
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032190
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21697368

Scores

EPSS 0.0167
EPSS Percentile 74.0%

Details

CWE
CWE-200
Status published
Products (8)
ibm/websphere_application_server 8.5.0.0
ibm/websphere_application_server 8.5.0.1
ibm/websphere_application_server 8.5.0.2
ibm/websphere_application_server 8.5.5.0
ibm/websphere_application_server 8.5.5.1
ibm/websphere_application_server 8.5.5.2
ibm/websphere_application_server 8.5.5.3
ibm/websphere_application_server 8.5.5.4
Published Apr 27, 2015
Tracked Since Feb 18, 2026