Vulnerability Bulletins |
IBM Security Bulletin: varying error codes allows detection of existing systems behind firewall |
|
| Affected software | IBM |
|
A security vulnerability related to content handler URLs makes it possible to check if a system exists (for example, behind a firewall). A different error code is returned for a) systems that exist but are not accessible via the proxy functionality versus b) systems that do not exist. CVE(s): CVE-2014-4746 Affected product(s) and affected version(s): WebSphere Service Registry and Repository versions 7, 7.5, 8.0, 8.5 Refer to the following reference URLs for remediation and additional More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_varying_error_codes_allows_detection_of_existing_systems_behind_firewall?lang=en_us |
|