CVE-2019-4477

Published: Sep 17, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.

Affected (4)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	From 7.0.0.0 to 7.0.0.45
Ibm Websphere Application Server	From 8.0.0.0 to 8.0.0.15
Ibm Websphere Application Server	From 8.5.0.0 to 8.5.5.16
Ibm Websphere Application Server	From 9.0.0.0 to 9.0.5.0