{"id":"CVE-2017-1731","state":"PUBLISHED","title":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could ex","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.","publishedAt":"2018-01-30T18:00:00.000Z","updatedAt":"2024-09-16T18:54:30.990Z","severity":null,"assigner":"ibm","products":["IBM WebSphere Application Server"],"affected":[{"vendor":"IBM","product":"WebSphere Application Server","versions":[{"version":"9.0","status":"affected"},{"version":"7.0.0.35","status":"affected"},{"version":"7.0.0.37","status":"affected"},{"version":"7.0.0.39","status":"affected"},{"version":"7.0.0.41","status":"affected"},{"version":"7.0.0.43","status":"affected"},{"version":"8.0.0.4","status":"affected"},{"version":"8.0.0.5","status":"affected"},{"version":"8.0.0.6","status":"affected"},{"version":"8.0.0.7","status":"affected"},{"version":"8.0.0.8","status":"affected"},{"version":"8.0.0.9","status":"affected"},{"version":"8.0.0.10","status":"affected"},{"version":"8.0.0.11","status":"affected"},{"version":"8.0.0.12","status":"affected"},{"version":"8.0.0.13","status":"affected"},{"version":"8.0.0.14","status":"affected"},{"version":"8.5.5.7","status":"affected"},{"version":"8.5.5.8","status":"affected"},{"version":"8.5.5.9","status":"affected"},{"version":"8.5.5.10","status":"affected"},{"version":"8.5.5.11","status":"affected"},{"version":"8.5.5.12","status":"affected"},{"version":"9.0.0.1","status":"affected"},{"version":"9.0.0.2","status":"affected"},{"version":"9.0.0.3","status":"affected"},{"version":"9.0.0.4","status":"affected"},{"version":"9.0.0.5","status":"affected"},{"version":"9.0.0.6","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/134912","http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R","http://www.securitytracker.com/id/1040356","http://www.securityfocus.com/bid/102911"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:33.892Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/1xxx/CVE-2017-1731.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-1731","state":"PUBLISHED","datePublished":"2018-01-30T18:00:00.000Z","dateUpdated":"2024-09-16T18:54:30.990Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2016-11-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges."}],"affected":[{"vendor":"IBM","product":"WebSphere Application Server","versions":[{"version":"9.0","status":"affected"},{"version":"7.0.0.35","status":"affected"},{"version":"7.0.0.37","status":"affected"},{"version":"7.0.0.39","status":"affected"},{"version":"7.0.0.41","status":"affected"},{"version":"7.0.0.43","status":"affected"},{"version":"8.0.0.4","status":"affected"},{"version":"8.0.0.5","status":"affected"},{"version":"8.0.0.6","status":"affected"},{"version":"8.0.0.7","status":"affected"},{"version":"8.0.0.8","status":"affected"},{"version":"8.0.0.9","status":"affected"},{"version":"8.0.0.10","status":"affected"},{"version":"8.0.0.11","status":"affected"},{"version":"8.0.0.12","status":"affected"},{"version":"8.0.0.13","status":"affected"},{"version":"8.0.0.14","status":"affected"},{"version":"8.5.5.7","status":"affected"},{"version":"8.5.5.8","status":"affected"},{"version":"8.5.5.9","status":"affected"},{"version":"8.5.5.10","status":"affected"},{"version":"8.5.5.11","status":"affected"},{"version":"8.5.5.12","status":"affected"},{"version":"9.0.0.1","status":"affected"},{"version":"9.0.0.2","status":"affected"},{"version":"9.0.0.3","status":"affected"},{"version":"9.0.0.4","status":"affected"},{"version":"9.0.0.5","status":"affected"},{"version":"9.0.0.6","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/134912","tags":["x_refsource_MISC"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1040356","name":"1040356","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/102911","name":"102911","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"Gain Privileges","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2018-02-09T10:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2018-01-29T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2018-01-29T00:00:00","ID":"CVE-2017-1731","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"WebSphere Application Server","version":{"version_data":[{"version_value":"9.0"},{"version_value":"7.0.0.35"},{"version_value":"7.0.0.37"},{"version_value":"7.0.0.39"},{"version_value":"7.0.0.41"},{"version_value":"7.0.0.43"},{"version_value":"8.0.0.4"},{"version_value":"8.0.0.5"},{"version_value":"8.0.0.6"},{"version_value":"8.0.0.7"},{"version_value":"8.0.0.8"},{"version_value":"8.0.0.9"},{"version_value":"8.0.0.10"},{"version_value":"8.0.0.11"},{"version_value":"8.0.0.12"},{"version_value":"8.0.0.13"},{"version_value":"8.0.0.14"},{"version_value":"8.5.5.7"},{"version_value":"8.5.5.8"},{"version_value":"8.5.5.9"},{"version_value":"8.5.5.10"},{"version_value":"8.5.5.11"},{"version_value":"8.5.5.12"},{"version_value":"9.0.0.1"},{"version_value":"9.0.0.2"},{"version_value":"9.0.0.3"},{"version_value":"9.0.0.4"},{"version_value":"9.0.0.5"},{"version_value":"9.0.0.6"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Privileges"}]}]},"references":{"reference_data":[{"name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/134912","refsource":"MISC","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/134912"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R"},{"name":"1040356","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1040356"},{"name":"102911","refsource":"BID","url":"http://www.securityfocus.com/bid/102911"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/134912","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1040356","name":"1040356","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/102911","name":"102911","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T13:39:32.272Z"}}]}}}