low2.1
CVE-2008-0740
IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to ht…
Impact
IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | through 6.0.2.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/42878
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785
- http://www-1.ibm.com/support/docview.wss?uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?uid=swg27007951
- http://www.securityfocus.com/bid/27400
- http://www.vupen.com/english/advisories/2008/0241
- http://osvdb.org/42878
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785
- http://www-1.ibm.com/support/docview.wss?uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?uid=swg27007951
- http://www.securityfocus.com/bid/27400
- http://www.vupen.com/english/advisories/2008/0241