low2.1
CVE-2009-0504
WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed bindin…
Impact
WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which allows local users to discover a password by reading a SOAP message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | through 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48700
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48700