CVE

Id
37939  
CVE No.
CVE-2009-0504  
Status
Candidate  
Description
WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which allows local users to discover a password by reading a SOAP message.  
Phase
Assigned (20090210)  
Votes
None (candidate not yet proposed)  
Comments