CVE-2012-2170

No fix known EPSS 2%

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.

Published 2012-06-20 · CVE record · OSV

Products: ibm websphere_application_server