IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1932
Reference (s):
- AIXAPAR:PI38403
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1PI38403
- BID:76466
- URL: http://www.securityfocus.com/bid/76466
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275