NVD

Id
26298  
Name
CVE-2015-5004  
Description
The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-15  
Modified Date
2016-12-07  
Seq
2015-5004  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139148 26298 CVE-2015-5004 PI41476  View
139149 26298 CVE-2015-5004 http://www-01.ibm.com/support/docview.wss?uid=swg21966638  View
139150 26298 CVE-2015-5004 1034349  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11103 JVNDB-2015-006423 IBM WebSphere Application Server の Edge Component Caching Proxy における重要な情報を取得される脆弱性 IBM WebSphere Application Server (WAS) の Edge Component Caching Proxy は、データを適切に暗号化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-5004 82229 CVE-2015-5004 26298 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006423.html 2015-12-11 2015-12-17 View