Lucene search

K
cveMitreCVE-2009-0437
HistoryFeb 10, 2009 - 10:30 p.m.

CVE-2009-0437

2009-02-1022:30:00
CWE-200
mitre
web.nvd.nist.gov
18
ibm
websphere
application server
was
windows
sensitive information
exposure
cve-2009-0437
nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

High

EPSS

0

Percentile

5.1%

The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file.

Affected configurations

Nvd
Node
ibmwebsphere_application_serverMatch6.0.2
AND
microsoftwindows
VendorProductVersionCPE
ibmwebsphere_application_server6.0.2cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2009-0437