Lucene search

[email protected]CVE-2010-0563

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-0563

2022-10-0316:21:11

CWE-200

[email protected]

web.nvd.nist.gov

ibm

websphere

application server

sso

cve-2010-0563

vulnerability

nvd

ssl

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

JSON

The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.

Affected configurations

NVD

Node

ibmwebsphere_application_serverMatch7.0

ibmwebsphere_application_serverMatch7.0.0.1

ibmwebsphere_application_serverMatch7.0.0.3

ibmwebsphere_application_serverMatch7.0.0.5

ibmwebsphere_application_serverMatch7.0.0.7

ibmwebsphere_application_serverMatch7.0.0.8

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq7.0
ibm:websphere_application_serveribm websphere application servereq7.0.0.1
ibm:websphere_application_serveribm websphere application servereq7.0.0.3
ibm:websphere_application_serveribm websphere application servereq7.0.0.5
ibm:websphere_application_serveribm websphere application servereq7.0.0.7
ibm:websphere_application_serveribm websphere application servereq7.0.0.8

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	7.0
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.1
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.3
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.5
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.7
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.8

References

secunia.com/advisories/38425

securitytracker.com/id?1023551

www-01.ibm.com/support/docview.wss?uid=swg21417839

www-1.ibm.com/support/docview.wss?uid=swg1PM00610

www.osvdb.org/62140

www.securityfocus.com/bid/38122

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

JSON

Related for CVE-2010-0563

nvd1 cvelist1 prion1