{"id":"CVE-2014-0891","state":"PUBLISHED","title":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging i","description":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging incorrect request handling by the (1) Proxy or (2) ODR server.","publishedAt":"2014-06-28T00:00:00.000Z","updatedAt":"2024-08-06T09:27:20.254Z","severity":null,"assigner":"ibm","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/91286","http://www-01.ibm.com/support/docview.wss?uid=swg21676092","http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786","http://www-01.ibm.com/support/docview.wss?uid=swg21676091","http://www-01.ibm.com/support/docview.wss?uid=swg21669554"],"weaknesses":[],"ingestedAt":"2026-10-29T19:41:00.122Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/0xxx/CVE-2014-0891.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-0891","state":"PUBLISHED","datePublished":"2014-06-28T00:00:00.000Z","dateUpdated":"2024-08-06T09:27:20.254Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2014-01-06T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging incorrect request handling by the (1) Proxy or (2) ODR server."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91286","name":"ibm-was-cve20140891-info-disc(91286)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786","name":"PI09786","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676091","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21669554","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2014-05-19T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-0891","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging incorrect request handling by the (1) Proxy or (2) ODR server."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ibm-was-cve20140891-info-disc(91286)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91286"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092"},{"name":"PI09786","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21676091","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676091"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21669554","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21669554"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91286","name":"ibm-was-cve20140891-info-disc(91286)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI09786","name":"PI09786","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676091","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21669554","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T09:27:20.254Z"}}]}}}