NVD

Id
13170  
Name
CVE-2010-1651  
Description
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-05-03  
Modified Date
2010-06-22  
Seq
2010-1651  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72795 13170 CVE-2010-1651 PM08892  View
72796 13170 CVE-2010-1651 PM12247  View
72797 13170 CVE-2010-1651 PM15829  View
72798 13170 CVE-2010-1651 ADV-2010-1411  View
72799 13170 CVE-2010-1651 ibm-was-trace-information-disclosure(58324)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38953 JVNDB-2010-004738 IBM WAS における重要な情報を取得される脆弱性 IBM WebSphere Application Server (WAS) は、Basic 認証および SIP トレースが有効になっている際、送受信した SIP メッセージを全て完全な状態で記録するため、重要な情報を取得される脆弱性が存在します。 CVE-2010-1651 44231 CVE-2010-1651 13170 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004738.html 2010-05-03 2012-09-25 View