Vulnerability Description
The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Application Server | <= 6.0.2.33 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/35301Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27006876PatchVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999
- http://www.securityfocus.com/bid/35405
- http://www.vupen.com/english/advisories/2009/1464PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52077
- http://secunia.com/advisories/35301Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27006876PatchVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999
- http://www.securityfocus.com/bid/35405
FAQ
What is CVE-2009-1900?
CVE-2009-1900 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, al...
How severe is CVE-2009-1900?
CVE-2009-1900 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-1900?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Application Server.