Unscored CVE-2017-1504 EUVD-2017-10520GHSA-xq24-f354-mr59

IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable…

Published Aug 3, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	9.0	—

References

100137 vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg22006803
https://exchange.xforce.ibmcloud.com/vulnerabilities/129579