NetSight
high7.8

CVE-2013-2951

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows lo…

Impact

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621.

Affected products

VendorProductAffected versions
IbmWebsphere Portal
Versions 7.0.0.0, 7.0.0.1, 7.0.0.2, 8.0.0.0, 8.0.0.1

Weakness classification

References