NetSight
IP …
low1.9

CVE-2010-0769

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectio…

Impact

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
through 6.0.2.39
Versions 6.0, 6.0.0.2, 6.0.0.3, 6.0.1, 6.0.1.2

Weakness classification

CWE-255

References