Information Disclosure in IBM WebSphere Portal UTL Portlet
CVE-2014-3056

Currently unrated

Key Information:

Vendor
IBM
Status
Websphere Portal
Websphere Portal Unified Task List Portlet
Vendor
CVE Published:
29 July 2014

Summary

The Unified Task List (UTL) Portlet in IBM WebSphere Portal versions 7.x and 8.x, including 8.0.0.1 CF12, has a vulnerability that allows remote attackers to access sensitive information. This can include critical details about environment variables and installed JAR versions through unspecified methods, potentially leading to further exploitation.

References

http://secunia.com/advisories/60499
third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21677032
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/93530
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.