CVE

Id
37867  
CVE No.
CVE-2009-0432  
Status
Candidate  
Description
The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411403 37867 CVE-2009-0432 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
411404 37867 CVE-2009-0432 AIXAPAR:PK59108  View
411405 37867 CVE-2009-0432 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108  View
411406 37867 CVE-2009-0432 BID:33700  View
411407 37867 CVE-2009-0432 URL:http://www.securityfocus.com/bid/33700  View
411408 37867 CVE-2009-0432 XF:websphere-file-transfer-info-disclosure(48522)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43444 JVNDB-2009-004451 WAS で使用される IBM HTTP Server の mod_ibm_ssl モジュールなどにおける脆弱性 WebSphere Application Server (WAS) で使用される IBM HTTP Server の (1) mod_ibm_ssl および (2) mod_cgid モジュールは、AF_UNIX ソケットに誤ったパーミッションを設定するため、不特定の影響を受ける脆弱性が存在します。 CVE-2009-0436 37867 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004451.html  View