CVE

Id
40178  
CVE No.
CVE-2009-2743  
Status
Candidate  
Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file.  
Phase
Assigned (20090812)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441765 40178 CVE-2009-2743 MISC:http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
441766 40178 CVE-2009-2743 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View
441767 40178 CVE-2009-2743 AIXAPAR:PK86137  View
441768 40178 CVE-2009-2743 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137  View
441769 40178 CVE-2009-2743 SECUNIA:37796  View
441770 40178 CVE-2009-2743 URL:http://secunia.com/advisories/37796  View
441771 40178 CVE-2009-2743 VUPEN:ADV-2009-2721  View
441772 40178 CVE-2009-2743 URL:http://www.vupen.com/english/advisories/2009/2721  View
441773 40178 CVE-2009-2743 XF:was-wsadmin-jaasj2c-information-disclosure(53343)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41684 JVNDB-2009-002691 IBM WebSphere Application Server (WAS) における重要な情報を取得される脆弱性 IBM WebSphere Application Server (WAS) の Java Naming and Directory Interface (JNDI) 実装は、UserRegistry オブジェクトメソッドへのアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2009-2747 40178 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002691.html  View