Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-0434
HistoryFeb 10, 2009 - 10:30 p.m.

CVE-2009-0434

2009-02-1022:30:00
CWE-200
mitre
web.nvd.nist.gov
24
ibm websphere
app server
perfservlet
pmi
performance tools
cve-2009-0434
nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

54.8%

JSON

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.

Affected configurations

Nvd
Node
ibmwebsphere_application_serverMatch6.0
OR
ibmwebsphere_application_serverMatch6.0.0.1
OR
ibmwebsphere_application_serverMatch6.0.0.2
OR
ibmwebsphere_application_serverMatch6.0.0.3
OR
ibmwebsphere_application_serverMatch6.0.1
OR
ibmwebsphere_application_serverMatch6.0.1.1
OR
ibmwebsphere_application_serverMatch6.0.1.2
OR
ibmwebsphere_application_serverMatch6.0.1.3
OR
ibmwebsphere_application_serverMatch6.0.1.5
OR
ibmwebsphere_application_serverMatch6.0.1.7
OR
ibmwebsphere_application_serverMatch6.0.1.9
OR
ibmwebsphere_application_serverMatch6.0.1.11
OR
ibmwebsphere_application_serverMatch6.0.1.13
OR
ibmwebsphere_application_serverMatch6.0.1.15
OR
ibmwebsphere_application_serverMatch6.0.1.17
OR
ibmwebsphere_application_serverMatch6.0.2
OR
ibmwebsphere_application_serverMatch6.0.2.1
OR
ibmwebsphere_application_serverMatch6.0.2.2
OR
ibmwebsphere_application_serverMatch6.0.2.3
OR
ibmwebsphere_application_serverMatch6.0.2.4
OR
ibmwebsphere_application_serverMatch6.0.2.5
OR
ibmwebsphere_application_serverMatch6.0.2.6
OR
ibmwebsphere_application_serverMatch6.0.2.7
OR
ibmwebsphere_application_serverMatch6.0.2.9
OR
ibmwebsphere_application_serverMatch6.0.2.11
OR
ibmwebsphere_application_serverMatch6.0.2.13
OR
ibmwebsphere_application_serverMatch6.0.2.15
OR
ibmwebsphere_application_serverMatch6.0.2.17
OR
ibmwebsphere_application_serverMatch6.0.2.19
OR
ibmwebsphere_application_serverMatch6.0.2.22
OR
ibmwebsphere_application_serverMatch6.0.2.23
OR
ibmwebsphere_application_serverMatch6.0.2.24
OR
ibmwebsphere_application_serverMatch6.0.2.25
OR
ibmwebsphere_application_serverMatch6.0.2.27
OR
ibmwebsphere_application_serverMatch6.0.2.28
OR
ibmwebsphere_application_serverMatch6.0.2.29
OR
ibmwebsphere_application_serverMatch6.0.2.30
OR
ibmwebsphere_application_serverMatch6.0.2.31
OR
ibmwebsphere_application_serverMatch6.1
OR
ibmwebsphere_application_serverMatch6.1.0
OR
ibmwebsphere_application_serverMatch6.1.0.0
OR
ibmwebsphere_application_serverMatch6.1.0.1
OR
ibmwebsphere_application_serverMatch6.1.0.2
OR
ibmwebsphere_application_serverMatch6.1.0.10
OR
ibmwebsphere_application_serverMatch6.1.0.11
OR
ibmwebsphere_application_serverMatch6.1.0.12
OR
ibmwebsphere_application_serverMatch6.1.0.13
OR
ibmwebsphere_application_serverMatch6.1.0.14
OR
ibmwebsphere_application_serverMatch6.1.0.15
OR
ibmwebsphere_application_serverMatch6.1.0.16
OR
ibmwebsphere_application_serverMatch6.1.0.17
OR
ibmwebsphere_application_serverMatch6.1.0.18
OR
ibmwebsphere_application_serverMatch6.1.0.19
OR
ibmwebsphere_application_serverMatch6.1.0.20
OR
ibmwebsphere_application_serverMatch6.1.0.21
OR
ibmwebsphere_application_serverMatch7.0
VendorProductVersionCPE
ibmwebsphere_application_server6.0cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.1cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.2cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.3cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.1cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.2cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.3cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.5cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.7cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 561

Related

prion 2
cvelist 2
nvd 2
cve 1
nessus 3
seebug 1
prion
prion
Design/Logic Flaw
2009-02-10 22:30:00
Information disclosure
2008-12-10 00:30:00
cvelist
cvelist
CVE-2008-5413
2008-12-10 00:00:00
CVE-2009-0434
2009-02-10 22:13:00
nvd
nvd
CVE-2009-0434
2009-02-10 22:30:00
CVE-2008-5413
2008-12-10 00:30:00
cve
cve
CVE-2008-5413
2008-12-10 00:30:00
nessus
nessus
IBM WebSphere Application Server 6.1 < Fix Pack 21 Multiple Flaws
2009-02-12 00:00:00
IBM WebSphere Application Server 7.0 < Fix Pack 1
2008-12-10 00:00:00
IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities
2008-10-27 00:00:00
seebug
seebug
IBM WebSphere Application Server &quot;PerfServlet&quot;信息泄漏漏洞
2009-02-16 00:00:00

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

54.8%

JSON
Related for CVE-2009-0434
prion2cvelist2nvd2cve1nessus3seebug1