← Back

CVE-2009-0434

nvd nist
Published: Feb 10, 2009Modified: Apr 23, 2026

JSON object

Loading...
1.9
Vector
AV:L/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 3.4 / Impact: 2.9
Source: NVD

Description

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.

Affected (56)

1 product
Websphere Application Server
Configuration A
56 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.0.0.1
Version 6.0.0.2
Version 6.0.0.3
Version 6.0.1.11
Version 6.0.1.13
Version 6.0.1.15
Version 6.0.1.17
Version 6.0.1.1
Version 6.0.1.2
Version 6.0.1.3
Version 6.0.1.5
Version 6.0.1.7
Version 6.0.1.9
Version 6.0.1
Version 6.0.2.11
Version 6.0.2.13
Version 6.0.2.15
Version 6.0.2.17
Version 6.0.2.19
Version 6.0.2.1
Version 6.0.2.22
Version 6.0.2.23
Version 6.0.2.24
Version 6.0.2.25
Version 6.0.2.27
Version 6.0.2.28
Version 6.0.2.29
Version 6.0.2.2
Version 6.0.2.30
Version 6.0.2.31
Version 6.0.2.3
Version 6.0.2.4
Version 6.0.2.5
Version 6.0.2.6
Version 6.0.2.7
Version 6.0.2.9
Version 6.0.2
Version 6.0
Version 6.1.0.0
Version 6.1.0.10
Version 6.1.0.11
Version 6.1.0.12
Version 6.1.0.13
Version 6.1.0.14
Version 6.1.0.15
Version 6.1.0.16
Version 6.1.0.17
Version 6.1.0.18
Version 6.1.0.19
Version 6.1.0.1
Version 6.1.0.20
Version 6.1.0.21
Version 6.1.0.2
Version 6.1.0
Version 6.1
Version 7.0

Timeline

No history available yet.