5
CVSSv2

CVE-2009-1900

Published: 03/06/2009 Updated: 17/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 prior to 6.0.2.35, 6.1 prior to 6.1.0.25, and 7.0 prior to 7.0.0.5, when tracing is enabled, allow remote malicious users to obtain sensitive information via unspecified use of the wsadmin scripting tool.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere application server 6.0.2.11

ibm websphere application server 6.0.2.1

ibm websphere application server 6.0.2.24

ibm websphere application server 6.0.2.21

ibm websphere application server 6.0.2.20

ibm websphere application server 6.0.2.6

ibm websphere application server 6.0.2.28

ibm websphere application server 6.0.2.9

ibm websphere application server 6.0.2.13

ibm websphere application server 6.0.2.10

ibm websphere application server 6.0.2.17

ibm websphere application server 6.0.2.15

ibm websphere application server 6.0.2.18

ibm websphere application server 6.0.2.19

ibm websphere application server 6.0.2.32

ibm websphere application server 6.0.2.29

ibm websphere application server 6.0.2.12

ibm websphere application server 6.0.2

ibm websphere application server 6.0.2.23

ibm websphere application server 6.0.2.22

ibm websphere application server 6.0.2.25

ibm websphere application server 6.0.2.30

ibm websphere application server 6.0.2.5

ibm websphere application server 6.0.2.7

ibm websphere application server 6.0.2.8

ibm websphere application server 6.0.2.14

ibm websphere application server 6.0.2.16

ibm websphere application server 6.0.2.27

ibm websphere application server 6.0.2.2

ibm websphere application server 6.0.2.4

ibm websphere application server 6.0.2.3

ibm websphere application server 6.0.2.31

ibm websphere application server