Security Advisory

CVE-2014-3021

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-19 01:00:00

Last updated 2024-08-06 10:28:46

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 does not properly handle HTTP headers, which allows remote attackers to obtain sensitive cookie and authentication data via an unspecified HTTP method.

← Browse all CVEs View on cve.org ↗