Vulnerability in IBM Websphere Application Server

CVE-2012-3304

The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_application_server — versions 6.1.0, 6.1.0.0, 6.1.0.1
N/a — versions n/a

References

psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_OSVDB, vdb-entry)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)