2.1

CVE-2009-2743

EPSS 0.39%
Veröffentlicht 21.09.2009 19:30:00
Zuletzt bearbeitet 16.06.2026 23:10:08
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 22 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version6.1

Ibm ≫ Websphere Application Server Version6.1.0.1

Ibm ≫ Websphere Application Server Version6.1.0.2

Ibm ≫ Websphere Application Server Version6.1.0.3

Ibm ≫ Websphere Application Server Version6.1.0.5

Ibm ≫ Websphere Application Server Version6.1.0.7

Ibm ≫ Websphere Application Server Version6.1.0.9

Ibm ≫ Websphere Application Server Version6.1.0.11

Ibm ≫ Websphere Application Server Version6.1.0.13

Ibm ≫ Websphere Application Server Version6.1.0.15

Ibm ≫ Websphere Application Server Version6.1.0.17

Ibm ≫ Websphere Application Server Version6.1.0.19

Ibm ≫ Websphere Application Server Version6.1.0.21

Ibm ≫ Websphere Application Server Version6.1.0.23

Ibm ≫ Websphere Application Server Version6.1.0.25

Ibm ≫ Websphere Application Server Version7.0

Ibm ≫ Websphere Application Server Version7.0.0.1

Ibm ≫ Websphere Application Server Version7.0.0.2

Ibm ≫ Websphere Application Server Version7.0.0.3

Ibm ≫ Websphere Application Server Version7.0.0.4

Ibm ≫ Websphere Application Server Version7.0.0.5

Ibm ≫ Websphere Application Server Version7.0.0.6

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.39%	0.303

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www-01.ibm.com/support/docview.wss?uid=swg27007951

Patch

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

http://www.vupen.com/english/advisories/2009/2721

Vendor Advisory

http://secunia.com/advisories/37796

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137

https://exchange.xforce.ibmcloud.com/vulnerabilities/53343

https://nvd.nist.gov/vuln/detail/CVE-2009-2743

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2743

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2743

EUVD