The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2012-05-01T19:00:00

Updated: 2024-08-06T19:26:08.460Z

Reserved: 2012-04-04T00:00:00

Link: CVE-2012-2162

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-05-01T19:55:02.567

Modified: 2017-08-29T01:31:32.053

Link: CVE-2012-2162

cve-icon Redhat

No data.