Description
The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034349
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21966638
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI41476
Scores
EPSS
0.0110
EPSS Percentile
61.8%
Details
CWE
CWE-200
Status
published
Products (23)
ibm/websphere_application_server
8.0.0.0
ibm/websphere_application_server
8.0.0.1
ibm/websphere_application_server
8.0.0.2
ibm/websphere_application_server
8.0.0.3
ibm/websphere_application_server
8.0.0.4
ibm/websphere_application_server
8.0.0.5
ibm/websphere_application_server
8.0.0.6
ibm/websphere_application_server
8.0.0.7
ibm/websphere_application_server
8.0.0.8
ibm/websphere_application_server
8.0.0.9
... and 13 more
Published
Dec 15, 2015
Tracked Since
Feb 18, 2026