CVE-2010-0769
1.9
Vector
AV:L/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 3.4 / Impact: 2.9
Source: NVD
Description
IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.
Affected (48)
Products: Ibm: Websphere Application Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 6.0.2.39 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 6.1.0.29 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0.0.1 |
Related CWEs
References (6)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.