© 2026 vulntracker.io

CVE-2012-2162

N/A

Published: May 1, 2012 at 07:00 PM UTC

Updated: June 16, 2026 at 11:41 PM UTC

1 product affected across 1 vendorWebSphere Application Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

WebSphere Application Server · IBM

95%

v ≤ 8.0.0.05.0 5.0.0 5.0.1 5.0.2 5.0.2.1 5.0.2.10 5.0.2.11 5.0.2.12 5.0.2.13 5.0.2.14 5.0.2.15 5.0.2.16 5.0.2.2 5.0.2.3 5.0.2.4 5.0.2.5 5.0.2.6 5.0.2.7 5.0.2.8 5.0.2.9 5.1.0 5.1.0.2 5.1.0.3 5.1.0.4 5.1.0.5 5.1.1 5.1.1.1 5.1.1.10 5.1.1.11 5.1.1.12 5.1.1.13 5.1.1.14 5.1.1.15 5.1.1.16 5.1.1.17 5.1.1.2 5.1.1.3 5.1.1.4 5.1.1.5 5.1.1.6 5.1.1.7 5.1.1.8 5.1.1.9 6.0 6.0.0.1 6.0.0.2 6.0.0.3 6.0.1 6.0.1.1 6.0.1.11 6.0.1.13 6.0.1.15 6.0.1.17 6.0.1.2 6.0.1.3 6.0.1.5 6.0.1.7 6.0.1.9 6.0.2 6.0.2.1 6.0.2.11 6.0.2.13 6.0.2.15 6.0.2.17 6.0.2.19 6.0.2.2 6.0.2.22 6.0.2.23 6.0.2.24 6.0.2.25 6.0.2.27 6.0.2.28 6.0.2.29 6.0.2.3 6.0.2.30 6.0.2.31 6.0.2.32 6.0.2.33 6.0.2.35 6.0.2.37 6.0.2.4 6.0.2.5 6.0.2.6 6.0.2.7 6.0.2.9 6.1 6.1.0 6.1.0.0 6.1.0.1 6.1.0.11 6.1.0.12 6.1.0.15 6.1.0.17 6.1.0.19 6.1.0.2 6.1.0.21 6.1.0.23 6.1.0.25 6.1.0.27 6.1.0.29 6.1.0.3 6.1.0.31 6.1.0.33 6.1.0.35 6.1.0.37 6.1.0.39 6.1.0.41 6.1.0.43 6.1.0.5 6.1.0.7 6.1.0.9 6.1.1 6.1.13 6.1.14 6.1.3 6.1.5 6.1.6 6.1.7 7.0 7.0.0.1 7.0.0.11 7.0.0.13 7.0.0.15 7.0.0.17 7.0.0.19 7.0.0.2 7.0.0.21 7.0.0.3 7.0.0.4 7.0.0.5 7.0.0.6 7.0.0.7 7.0.0.8 7.0.0.9

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www-01.ibm.com/support/docview.wss?uid=swg21591172

References (3)

x_refsource_CONFIRM

Source: [email protected]

http://www-01.ibm.com/support/docview.wss?uid=swg21588312

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www-01.ibm.com/support/docview.wss?uid=swg21591172

VDB Entryx_refsource_XF

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/74900

CVSS

6.8MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-310

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card