Lucene search
HistoryFeb 15, 2011 - 1:00 a.m.
CVE-2008-7274
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
61.9%
IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.
Affected configurations
Node
ibmwebsphere_application_serverMatch6.1.0.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_application_server | 6.1.0.9 | cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2011-02-15 01:00:00
openvas
openvas
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
cvelist
cvelist
CVE-2008-7274
2011-02-14 23:00:00
cve
cve
CVE-2008-7274
2011-02-15 01:00:01
nessus
nessus
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
2010-04-05 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
61.9%
Related for NVD:CVE-2008-7274