Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of WebSphere AS 8.5.

Impacted products: WebSphere AS.

Severity: 2/4.

Creation date: 11/09/2015.

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in WebSphere AS 8.5.

An attacker can bypass security features in On Demand Router, in
order to obtain sensitive information. [severity:2/4;
CVE-2015-1932, PI38403]

An attacker can spoof an identity. [severity:2/4; CVE-2015-4938,
PI37396]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/WebSphere-AS-8-5-two-vulnerabilities-17871