Information disclosure in IBM Websphere Portal

CVE-2014-3056

The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_portal — versions 7.0.0.0, 7.0.0.1, 7.0.0.2
Ibm Websphere_portal_unified_task_list_portlet — versions 6.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)